qilin
First seen October 8, 2022Active2,262 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Guntert & Zimmerman | July 25, 2026 | ransomware_live | — |
| The Myers Y Cooper | July 25, 2026 | ransomware_live | — |
| Plitvička Jezera Nacionalni Park | July 25, 2026 | ransomware_live | — |
| Jubilee Jobs | July 25, 2026 | ransomware_live | — |
| Highline Community College | July 24, 2026 | ransomware_live | — |
| Kean University | July 24, 2026 | ransomware_live | — |
| Ejército Argentino | July 24, 2026 | ransomware_live | — |
| Stryker | July 24, 2026 | ransomware_live | — |
| GOP | July 24, 2026 | ransomware_live | — |
| Sunway Berhad | July 23, 2026 | ransomware_live | — |
| AppleOne Properties | July 23, 2026 | ransomware_live | — |
| Triton Trading | July 23, 2026 | ransomware_live | — |
| Cano Industrial | July 23, 2026 | ransomware_live | — |
| Assos Pharmaceuticals | July 23, 2026 | ransomware_live | — |
| Corporate 360 Business Solutions | July 23, 2026 | ransomware_live | — |
| WellPerf | July 23, 2026 | ransomware_live | — |
| ABM Enviro | July 23, 2026 | ransomware_live | — |
| Machinerie P&W | July 23, 2026 | ransomware_live | — |
| Infina Health | July 22, 2026 | ransomware_live | — |
| EFU Life Assurance | July 22, 2026 | ransomware_live | — |
| Cpcg | July 22, 2026 | ransomware_live | — |
| Salida Union School District | July 22, 2026 | ransomware_live | — |
| Recsa | July 22, 2026 | ransomware_live | — |
| Primeline Logistics | July 22, 2026 | ransomware_live | — |
| P & A Construction | July 22, 2026 | ransomware_live | — |
| Postres Reina | July 21, 2026 | ransomware_live | — |
| RehaVital Gesundheitsservice GmbH | July 21, 2026 | ransomware_live | — |
| Evergreen Title | July 21, 2026 | ransomware_live | — |
| Bolt & Nut Manufacturing | July 20, 2026 | ransomware_live | — |
| Famesa | July 19, 2026 | ransomware_live | — |
| City Ambulance Service | July 19, 2026 | ransomware_live | — |
| Associated Theatrical Contractors | July 19, 2026 | ransomware_live | — |
| Don Tortaco Mexican Grill | July 19, 2026 | ransomware_live | — |
| Synergy Products | July 19, 2026 | ransomware_live | — |
| Eana | July 19, 2026 | ransomware_live | — |
| PP+K | July 19, 2026 | ransomware_live | — |
| Droguería Martorani | July 18, 2026 | ransomware_live | — |
| Powder River Heating & Air Conditioning | July 18, 2026 | ransomware_live | — |
| AK Preparedness | July 18, 2026 | ransomware_live | — |
| Armara | July 18, 2026 | ransomware_live | — |
| KLD Labs | July 18, 2026 | ransomware_live | — |
| Sicc | July 18, 2026 | ransomware_live | — |
| The Nueva School | July 18, 2026 | ransomware_live | — |
| St Martha Catholic Church | July 18, 2026 | ransomware_live | — |
| Salina Supply | July 18, 2026 | ransomware_live | — |
| Heartland Catfish | July 18, 2026 | ransomware_live | — |
| Acosol | July 17, 2026 | ransomware_live | — |
| Cafar | July 17, 2026 | ransomware_live | — |
| Levin Furniture | July 15, 2026 | ransomware_live | — |
| Feliubadaló | July 15, 2026 | ransomware_live | — |
| International Delights | July 15, 2026 | ransomware_live | — |
| Sedemi | July 14, 2026 | ransomware_live | — |
| THL | July 14, 2026 | ransomware_live | — |
| TitanTV, Inc. | July 13, 2026 | ransomware_live | — |
| URH Hoteliers | July 13, 2026 | ransomware_live | — |
| Hillebrand Home Health | July 13, 2026 | ransomware_live | — |
| Busscar de Colombia | July 13, 2026 | ransomware_live | — |
| Cemoi | July 13, 2026 | ransomware_live | — |
| Jakub A.S. | July 13, 2026 | ransomware_live | — |
| Centro Científico e Cultural de Macau | July 13, 2026 | ransomware_live | — |
| Counts & Dobyns | July 13, 2026 | ransomware_live | — |
| Allied Plumbing & Heating | July 11, 2026 | ransomware_live | — |
| Carolina Agri-Power | July 11, 2026 | ransomware_live | — |
| Retelit SpA PIVA | July 11, 2026 | ransomware_live | — |
| Century Equities | July 11, 2026 | ransomware_live | — |
| Red Planet Hotels | July 10, 2026 | ransomware_live | — |
| CRZ Construcciones | July 10, 2026 | ransomware_live | — |
| Global Strategic Business Process Solutions | July 10, 2026 | ransomware_live | — |
| SPACElogic | July 10, 2026 | ransomware_live | — |
| Navana Real Estate | July 10, 2026 | ransomware_live | — |
| Promotora Zacapu | July 10, 2026 | ransomware_live | — |
| Hilo | July 10, 2026 | ransomware_live | — |
| Eurodefi | July 10, 2026 | ransomware_live | — |
| Peligro Sports | July 9, 2026 | ransomware_live | — |
| Hum & Jacoby | July 9, 2026 | ransomware_live | — |
| Alan F Burke | July 9, 2026 | ransomware_live | — |
| Bronken's Dist | July 9, 2026 | ransomware_live | — |
| Sun Dolphin Boats | July 9, 2026 | ransomware_live | — |
| Sintax | July 9, 2026 | ransomware_live | — |
| Inter Power Engineering | July 9, 2026 | ransomware_live | — |
| S.J. Louis | July 8, 2026 | ransomware_live | — |
| Accelirate | July 7, 2026 | ransomware_live | — |
| Next Clinics | July 7, 2026 | ransomware_live | — |
| COP® Vertriebs-GmbH Zentrale | July 7, 2026 | ransomware_live | — |
| Lechner Massivhaus GmbH | July 7, 2026 | ransomware_live | — |
| LabelDaddy | July 6, 2026 | ransomware_live | — |
| Grupo Inteca | July 6, 2026 | ransomware_live | — |
| Max Fordham | July 6, 2026 | ransomware_live | — |
| Wood Ellis & Wood CPA | July 6, 2026 | ransomware_live | — |
| Answer Precision Tool | July 6, 2026 | ransomware_live | — |
| Precision Steel Services | July 6, 2026 | ransomware_live | — |
| Keystone Homes | July 6, 2026 | ransomware_live | — |
| Groupe Fenwick | July 6, 2026 | ransomware_live | — |
| Sisint | July 3, 2026 | ransomware_live | — |
| Sitmatic | July 3, 2026 | ransomware_live | — |
| Goodwill Manasota | July 3, 2026 | ransomware_live | — |
| Md Lewis | July 3, 2026 | ransomware_live | — |
| TQ Financial Services | July 3, 2026 | ransomware_live | — |
| Pennant Hills Golf Club | July 2, 2026 | ransomware_live | — |
| Dixie Beverage | July 1, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).