qilin
First seen October 8, 2022Active2,414 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| hallmarknameplate.com | May 29, 2025 | ransomware_live | — |
| tmcousa.com | May 29, 2025 | ransomware_live | — |
| ccllabel.com | May 29, 2025 | ransomware_live | — |
| cpshawaii.net | May 29, 2025 | ransomware_live | — |
| logan.edu | May 29, 2025 | ransomware_live | — |
| a1trusses.com | May 29, 2025 | ransomware_live | — |
| bcps.k12.va.us | May 29, 2025 | ransomware_live | — |
| eli | May 29, 2025 | ransomware_live | — |
| evergreen-hotel | May 29, 2025 | ransomware_live | — |
| wheel-king | May 29, 2025 | ransomware_live | — |
| wilsonappliance.com | May 29, 2025 | ransomware_live | — |
| Cenomi Retail | May 28, 2025 | ransomware_live | — |
| Lasercam | May 27, 2025 | ransomware_live | — |
| Cape Robbin Inc | May 27, 2025 | ransomware_live | — |
| appotech | May 25, 2025 | ransomware_live | — |
| www.covenanthealth.net | May 25, 2025 | ransomware_live | — |
| elitavia.com | May 24, 2025 | ransomware_live | — |
| innovasystems.com | May 24, 2025 | ransomware_live | — |
| Estes Forwarding Worldwide | May 24, 2025 | ransomware_live | — |
| Chalmers Suspensions International | May 23, 2025 | ransomware_live | — |
| foiegrasespinet | May 23, 2025 | ransomware_live | — |
| Custom Food Ingredients | May 23, 2025 | ransomware_live | — |
| Cacspmec | May 22, 2025 | ransomware_live | — |
| radiologue.paris | May 22, 2025 | ransomware_live | — |
| Berko İlaç Ve Ki̇mya San Aş | May 22, 2025 | ransomware_live | — |
| skirball.org | May 22, 2025 | ransomware_live | — |
| brucknertruck.com | May 21, 2025 | ransomware_live | — |
| cityofbelvedere.org | May 21, 2025 | ransomware_live | — |
| tennsco.com | May 20, 2025 | ransomware_live | — |
| Asefa Insuarance | May 20, 2025 | ransomware_live | — |
| edgeanalytical.com | May 19, 2025 | ransomware_live | — |
| Centralno grijanje Tuzla | May 19, 2025 | ransomware_live | — |
| Culver's Lawn & Landscape, Inc. | May 19, 2025 | ransomware_live | — |
| BALNEARIO DE MONDARIZ | May 19, 2025 | ransomware_live | — |
| personalassistants.com | May 17, 2025 | ransomware_live | — |
| Straits Construction | May 16, 2025 | ransomware_live | — |
| scelltech.com | May 16, 2025 | ransomware_live | — |
| compagnons-du-devoir.com | May 16, 2025 | ransomware_live | — |
| gestionnaireimmobilier.ca | May 16, 2025 | ransomware_live | — |
| chreynolds.com | May 16, 2025 | ransomware_live | — |
| gmb.com | May 16, 2025 | ransomware_live | — |
| abilenetx.gov | May 16, 2025 | ransomware_live | — |
| ecoter | May 16, 2025 | ransomware_live | — |
| dcinvestors.com | May 15, 2025 | ransomware_live | — |
| MKA Accountants: Business Advisers, Moonee Ponds VIC | May 14, 2025 | ransomware_live | — |
| IES Synergy | May 14, 2025 | ransomware_live | — |
| ITinSell group | May 10, 2025 | ransomware_live | — |
| Habitat for Humanity of Greater Sioux Falls, Inc. | May 9, 2025 | ransomware_live | — |
| www.bestop.com | May 8, 2025 | ransomware_live | — |
| NSS 長崎船舶装備株式会社 | May 6, 2025 | ransomware_live | — |
| jbanksdesign.com | May 6, 2025 | ransomware_live | — |
| clinpath.com | May 6, 2025 | ransomware_live | — |
| mdgny.com | May 6, 2025 | ransomware_live | — |
| www.hcsheriff.gov | May 4, 2025 | ransomware_live | — |
| SHRADERLAW | May 4, 2025 | ransomware_live | — |
| HCI Informatique d'entreprise | May 2, 2025 | ransomware_live | — |
| teamhorner.com | May 2, 2025 | ransomware_live | — |
| cobbcounty | May 1, 2025 | ransomware_live | — |
| www.newseason.com | May 1, 2025 | ransomware_live | — |
| aldersonlaw.com | May 1, 2025 | ransomware_live | — |
| nuovadfl.it | April 30, 2025 | ransomware_live | — |
| dlcid.com | April 30, 2025 | ransomware_live | — |
| mossyoak.com | April 30, 2025 | ransomware_live | — |
| Matrix New World Engineering | April 30, 2025 | ransomware_live | — |
| www.cmic-cmo.com | April 30, 2025 | ransomware_live | — |
| SoloVue | April 29, 2025 | ransomware_live | — |
| cwcglobal.com | April 29, 2025 | ransomware_live | — |
| RC Manubhai | April 28, 2025 | ransomware_live | — |
| Megachem Singapore | April 28, 2025 | ransomware_live | — |
| www.southlandscs.com | April 27, 2025 | ransomware_live | — |
| www.nexus.edu.my | April 25, 2025 | ransomware_live | — |
| www.unitedcaps.com | April 23, 2025 | ransomware_live | — |
| parrishleasing.com | April 22, 2025 | ransomware_live | — |
| rfsd13.org | April 22, 2025 | ransomware_live | — |
| Dominion Lending Centres | April 21, 2025 | ransomware_live | — |
| Whitley Law Firm | April 21, 2025 | ransomware_live | — |
| bostonconveyorandautomation.com | April 20, 2025 | ransomware_live | — |
| The Michelson Organization | April 19, 2025 | ransomware_live | — |
| www.captrade.com | April 19, 2025 | ransomware_live | — |
| bertie.k12.nc.us | April 17, 2025 | ransomware_live | — |
| universalwindow.com | April 17, 2025 | ransomware_live | — |
| yankeetrails.com | April 17, 2025 | ransomware_live | — |
| www.nelson.edu | April 16, 2025 | ransomware_live | — |
| gates-cooper.com | April 16, 2025 | ransomware_live | — |
| a-1freeman | April 15, 2025 | ransomware_live | — |
| CDI | April 14, 2025 | ransomware_live | — |
| NL Olson & Associates | April 14, 2025 | ransomware_live | — |
| Pratt Homes | April 14, 2025 | ransomware_live | — |
| FEELFOUR | April 13, 2025 | ransomware_live | — |
| Richmond СPA | April 13, 2025 | ransomware_live | — |
| Mapaex | April 12, 2025 | ransomware_live | — |
| MS SUPPLY CHAIN SOLUTIONS (MALAYSIA) SDN. BHD | April 12, 2025 | ransomware_live | — |
| 1sthealthinc.com | April 12, 2025 | ransomware_live | — |
| Algas Engineering Pte Ltd - Algas Engineering | April 10, 2025 | ransomware_live | — |
| sk.com | April 10, 2025 | ransomware_live | — |
| Bangkok Electronics Co., Ltd | April 9, 2025 | ransomware_live | — |
| lawforpersonalinjury.com | April 9, 2025 | ransomware_live | — |
| sunbayhotel.com | April 7, 2025 | ransomware_live | — |
| Optimax Technology | April 5, 2025 | ransomware_live | — |
| yumaspazio.com | April 4, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).