qilin
First seen October 8, 2022Active2,414 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| canstarrestorations.com | September 30, 2024 | ransomware_live | — |
| DMF Lighting | September 30, 2024 | ransomware_live | — |
| Richardson | September 30, 2024 | ransomware_live | — |
| klingler-installationen-gmbh | September 28, 2024 | ransomware_live | — |
| Valu-Trac Investment Management | September 27, 2024 | ransomware_live | — |
| DPC DATA | September 26, 2024 | ransomware_live | — |
| Heritage Golf | September 25, 2024 | ransomware_live | — |
| DAIKIN THAILAND | September 25, 2024 | ransomware_live | — |
| The Law Offices of Jed Silverman | September 24, 2024 | ransomware_live | — |
| Canstar Restorations | September 23, 2024 | ransomware_live | — |
| Detroit Public TV | September 23, 2024 | ransomware_live | — |
| Kravit, Hovel & Krawczyk SC | September 23, 2024 | ransomware_live | — |
| DETROIT PBS ( PUBLIC TV ) | September 23, 2024 | ransomware_live | — |
| McGaughey & Keaney CPAs | September 23, 2024 | ransomware_live | — |
| Woodard , Hernandez , Roth & Day | September 22, 2024 | ransomware_live | — |
| AXIOM | September 22, 2024 | ransomware_live | — |
| MHT Partners | September 19, 2024 | ransomware_live | — |
| propak | September 16, 2024 | ransomware_live | — |
| United Animal Health | September 13, 2024 | ransomware_live | — |
| www.ekirkpatrick.com | September 12, 2024 | ransomware_live | — |
| Bertelkamp Automation | September 11, 2024 | ransomware_live | — |
| American Air Conditioning & Heating | September 9, 2024 | ransomware_live | — |
| CAM Tyre Trade Systems & Solutions | September 8, 2024 | ransomware_live | — |
| Millsboro Animal Hospital | September 7, 2024 | ransomware_live | — |
| Kingsmill Resort | August 31, 2024 | ransomware_live | — |
| KW Realty Group | August 31, 2024 | ransomware_live | — |
| Arch Street Capital Advisors | August 30, 2024 | ransomware_live | — |
| Stiller Aesthetics | August 29, 2024 | ransomware_live | — |
| Risser Oil | August 29, 2024 | ransomware_live | — |
| DIamond Contracting, LLC | August 29, 2024 | ransomware_live | — |
| Brookshire Dental - Hospitals & Clinics | August 26, 2024 | ransomware_live | — |
| dt-technologies | August 25, 2024 | ransomware_live | — |
| Stalcop Metal Forming LLC | August 25, 2024 | ransomware_live | — |
| JM Thompson | August 24, 2024 | ransomware_live | — |
| Baucenter.it | August 24, 2024 | ransomware_live | — |
| kahle cpa | August 23, 2024 | ransomware_live | — |
| Phoenix Air Conditioning & Heating | August 22, 2024 | ransomware_live | — |
| Mason City Recycling Center | August 19, 2024 | ransomware_live | — |
| agricola | August 19, 2024 | ransomware_live | — |
| Blink Photo | August 19, 2024 | ransomware_live | — |
| Penn Veterinary Supply INC | August 14, 2024 | ransomware_live | — |
| Exitz Technologies | August 14, 2024 | ransomware_live | — |
| EAGLE School | August 13, 2024 | ransomware_live | — |
| Brookshire Dental | August 12, 2024 | ransomware_live | — |
| Luso Cuanzа | August 11, 2024 | ransomware_live | — |
| Amco Metal Industrial Corporation | August 6, 2024 | ransomware_live | — |
| Dhoot Transmission | August 5, 2024 | ransomware_live | — |
| New TSI Holdings, NYSC | July 29, 2024 | ransomware_live | — |
| Patterson Health Center | July 26, 2024 | ransomware_live | — |
| Turman | July 26, 2024 | ransomware_live | — |
| Hiesmayr Haustechnik | July 25, 2024 | ransomware_live | — |
| simple-solution-systems | July 24, 2024 | ransomware_live | — |
| ZSZAALEJI.cz | July 17, 2024 | ransomware_live | — |
| Next step healthcar | July 17, 2024 | ransomware_live | — |
| www.srmedicalcenter.org | July 16, 2024 | ransomware_live | — |
| Prefeitura do Jaboatão dos Guararapes | July 16, 2024 | ransomware_live | — |
| Meli (BCYF & Bethany) | July 16, 2024 | ransomware_live | — |
| atlanticice.com | July 16, 2024 | ransomware_live | — |
| ccj.edu.lb | July 15, 2024 | ransomware_live | — |
| Network Communications Group | July 13, 2024 | ransomware_live | — |
| on365.co.uk | July 11, 2024 | ransomware_live | — |
| codacinc.org | July 11, 2024 | ransomware_live | — |
| KMLG | July 10, 2024 | ransomware_live | — |
| The Wacks Law Group | July 5, 2024 | ransomware_live | — |
| EHS Partnerships | July 3, 2024 | ransomware_live | — |
| ayurcan | June 27, 2024 | ransomware_live | — |
| YKS | June 25, 2024 | ransomware_live | — |
| promises2kids.org | June 24, 2024 | ransomware_live | — |
| Bunger Steel | June 23, 2024 | ransomware_live | — |
| Wise Construction | June 21, 2024 | ransomware_live | — |
| Synnovis | June 19, 2024 | ransomware_live | — |
| Next Step Healthcare | June 17, 2024 | ransomware_live | — |
| St Vincent de Paul Catholic School | June 17, 2024 | ransomware_live | — |
| pomalca.com.pe | June 17, 2024 | ransomware_live | — |
| kinslerfamilydentistry | June 16, 2024 | ransomware_live | — |
| EnviroApplications | June 14, 2024 | ransomware_live | — |
| Ashtons Legal LLP | June 14, 2024 | ransomware_live | — |
| Bock & Associates, LLP | June 11, 2024 | ransomware_live | — |
| svmasonry.com | June 10, 2024 | ransomware_live | — |
| Allied Toyota Lift | June 7, 2024 | ransomware_live | — |
| Inicio - Ganadería Revuelta | June 5, 2024 | ransomware_live | — |
| www.nuggetent.com | June 5, 2024 | ransomware_live | — |
| goodcents.com | June 5, 2024 | ransomware_live | — |
| Mitchell Industries | June 5, 2024 | ransomware_live | — |
| Development Services Group, Inc. | June 5, 2024 | ransomware_live | — |
| www.colonialbh.org | May 30, 2024 | ransomware_live | — |
| Above All Store Fronts | May 27, 2024 | ransomware_live | — |
| hydefuel.com | May 24, 2024 | ransomware_live | — |
| Datanet | May 23, 2024 | ransomware_live | — |
| Shyang Shin Bao Ind. Co., Ltd. (hereinafter referred to as ''SSB'') | May 17, 2024 | ransomware_live | — |
| a-agroup | May 17, 2024 | ransomware_live | — |
| northcottage.com | May 17, 2024 | ransomware_live | — |
| Municipalité La Guadeloupe | May 13, 2024 | ransomware_live | — |
| PFAM | May 11, 2024 | ransomware_live | — |
| Golden Acre | May 10, 2024 | ransomware_live | — |
| Edlong | May 9, 2024 | ransomware_live | — |
| Holstein Association USA | May 8, 2024 | ransomware_live | — |
| southernspecialtysupply.com | May 7, 2024 | ransomware_live | — |
| The Weinstein Firm | May 6, 2024 | ransomware_live | — |
| All Weather Architectural Aluminum | May 6, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).