qilin
First seen October 8, 2022Active2,262 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| F J O'Hara & Sons | January 16, 2024 | ransomware_live | — |
| Upper Merion Township | January 15, 2024 | ransomware_live | — |
| hotelcontinental.no | January 12, 2024 | ransomware_live | — |
| ROOSENS BÉTONS | January 11, 2024 | ransomware_live | — |
| molnar&partner | January 10, 2024 | ransomware_live | — |
| Corinth Coca-Cola Bottling Works | January 9, 2024 | ransomware_live | — |
| HALLEONARD | January 8, 2024 | ransomware_live | — |
| EPS.RS | December 27, 2023 | ransomware_live | — |
| Neurology Center of Nevada | December 7, 2023 | ransomware_live | — |
| Ware Manufacturing | December 7, 2023 | ransomware_live | — |
| Accu Reference Medical Lab | December 6, 2023 | ransomware_live | — |
| Great Lakes Technologies | December 4, 2023 | ransomware_live | — |
| CMS Communications | December 4, 2023 | ransomware_live | — |
| St. Johns River Water Management District | December 1, 2023 | ransomware_live | — |
| Yanfeng | November 27, 2023 | ransomware_live | — |
| Epstein Law | November 17, 2023 | ransomware_live | — |
| HAESUNG DS CO Ltd | November 17, 2023 | ransomware_live | — |
| unique-relations.at | November 5, 2023 | ransomware_live | — |
| Assurius.be | November 5, 2023 | ransomware_live | — |
| SG World | October 26, 2023 | ransomware_live | — |
| Cardiovascular Consultants Ltd | October 25, 2023 | ransomware_live | — |
| Paul-Alexandre Doïcesco, Notaires Associés | October 25, 2023 | ransomware_live | — |
| WT PARTNERSHIP | October 9, 2023 | ransomware_live | — |
| DiTRONICS Financial Services | October 4, 2023 | ransomware_live | — |
| Siamese Asset | September 26, 2023 | ransomware_live | — |
| CORTEL Technologies | September 12, 2023 | ransomware_live | — |
| WACOAL | September 8, 2023 | ransomware_live | — |
| PAUL-ALEXANDRE DOICESCO | September 8, 2023 | ransomware_live | — |
| GYP New Tree SA | August 28, 2023 | ransomware_live | — |
| Thonburi Energy Storage Systems (TESM) | August 7, 2023 | ransomware_live | — |
| Better System Co.,Ltd | July 12, 2023 | ransomware_live | — |
| MicroPort Scientific / LivaNova | July 11, 2023 | ransomware_live | — |
| ASIC Soluciones | July 6, 2023 | ransomware_live | — |
| Daiwa House Industry Co. | June 22, 2023 | ransomware_live | — |
| Printmarksolution | June 19, 2023 | ransomware_live | — |
| ASZ GmbH & Co | June 15, 2023 | ransomware_live | — |
| iECM Company Limited | June 14, 2023 | ransomware_live | — |
| gslelectric.com | June 13, 2023 | ransomware_live | — |
| Del Bono Hotel | June 9, 2023 | ransomware_live | — |
| Clarity Water Technologies, LLC | June 8, 2023 | ransomware_live | — |
| AWM Global Advisors | June 7, 2023 | ransomware_live | — |
| Conley & Wirick, P.A. | June 4, 2023 | ransomware_live | — |
| Ascentia Group Pty Ltd | June 4, 2023 | ransomware_live | — |
| Oppida Estates Limited | May 22, 2023 | ransomware_live | — |
| SMDEA | May 22, 2023 | ransomware_live | — |
| HECTOR MARTINEZ SOSA Y CIA SA | May 19, 2023 | ransomware_live | — |
| Maier Sanitär-Technik GmbH | May 19, 2023 | ransomware_live | — |
| Kannangara Thomson | May 19, 2023 | ransomware_live | — |
| eyeDOCS Ottawa | May 5, 2023 | ransomware_live | — |
| Gropper & Nejat, PLLC | May 3, 2023 | ransomware_live | — |
| SIIX Corporation | April 30, 2023 | ransomware_live | — |
| Sippex | April 12, 2023 | ransomware_live | — |
| Attent Zorg en Behandeling | March 1, 2023 | ransomware_live | — |
| fsmsolicitors.co.uk | February 24, 2023 | ransomware_live | — |
| GIGATRON.RS | February 20, 2023 | ransomware_live | — |
| Emtelco | November 9, 2022 | ransomware_live | — |
| Lojas Torra | November 9, 2022 | ransomware_live | — |
| Contempo Card | November 9, 2022 | ransomware_live | — |
| Robert Bernard | November 9, 2022 | ransomware_live | — |
| Dialog Information Technology | November 6, 2022 | ransomware_live | — |
| Municipio de Chihuahua | October 26, 2022 | ransomware_live | — |
| scinopharm.com | October 8, 2022 | ransomware_live | — |
← NewerPage 23 of 23
Claim data from ransomware.live and RansomLook (CC BY 4.0).