qilin
First seen October 8, 2022Active2,262 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Dynamic Laser Solutions Ltd. | July 1, 2026 | ransomware_live | — |
| Rossum Integration | July 1, 2026 | ransomware_live | — |
| Laughlin Nunnally Hood & Crum | July 1, 2026 | ransomware_live | — |
| Mattatuck Industrial Scrap Metal | July 1, 2026 | ransomware_live | — |
| Dennis Waters Rental Properties | July 1, 2026 | ransomware_live | — |
| Hemmersbach GmbH & Co. KG | June 30, 2026 | ransomware_live | — |
| Chamco | June 30, 2026 | ransomware_live | — |
| NASCO | June 29, 2026 | ransomware_live | — |
| Axionlog | June 29, 2026 | ransomware_live | — |
| Gsma | June 29, 2026 | ransomware_live | — |
| Bristol Place | June 29, 2026 | ransomware_live | — |
| Lam Soon | June 29, 2026 | ransomware_live | — |
| Metal Sur Famin | June 29, 2026 | ransomware_live | — |
| KALIACT ANCHETA et Associs | June 29, 2026 | ransomware_live | — |
| Musashino University | June 29, 2026 | ransomware_live | — |
| Kunert Fashion | June 29, 2026 | ransomware_live | — |
| Transcore | June 28, 2026 | ransomware_live | — |
| 1-800-dentist | June 28, 2026 | ransomware_live | — |
| ISOPLUS | June 25, 2026 | ransomware_live | — |
| Cash Canada | June 24, 2026 | ransomware_live | — |
| Lee International | June 23, 2026 | ransomware_live | — |
| Central Bank of Libya | June 22, 2026 | ransomware_live | — |
| Schumacher Homes | June 22, 2026 | ransomware_live | — |
| Florida Engineering Services | June 21, 2026 | ransomware_live | — |
| Tri-tec | June 21, 2026 | ransomware_live | — |
| Sivatel Bangkok | June 21, 2026 | ransomware_live | — |
| Taiwan Sintong Machinery Co., Ltd | June 21, 2026 | ransomware_live | — |
| Pacific Lamp & Supply | June 20, 2026 | ransomware_live | — |
| Commune d'Eyguires | June 19, 2026 | ransomware_live | — |
| PJ Daly Contracting | June 19, 2026 | ransomware_live | — |
| Sparkle Pools | June 19, 2026 | ransomware_live | — |
| Roth Industries | June 19, 2026 | ransomware_live | — |
| Makel Companies Group | June 18, 2026 | ransomware_live | — |
| Skupina Don Don - GRUPO BIMBO | June 18, 2026 | ransomware_live | — |
| ATCOM Outsourcing | June 18, 2026 | ransomware_live | — |
| Homes By J Anthony | June 18, 2026 | ransomware_live | — |
| THL PROJECT MANAGEMENT SDN. BHD. | June 18, 2026 | ransomware_live | — |
| Q Link Wireless | June 16, 2026 | ransomware_live | — |
| Misericórdia de Santo Tirso | June 16, 2026 | ransomware_live | — |
| Golfview Developmental Center | June 16, 2026 | ransomware_live | — |
| Can Healthcare Group | June 15, 2026 | ransomware_live | — |
| Grupo Indi | June 15, 2026 | ransomware_live | — |
| Cng Ty Cp T Vn Xd Tng Hp | June 15, 2026 | ransomware_live | — |
| DISTINET MURCIA SL | June 12, 2026 | ransomware_live | — |
| Bitek System | June 11, 2026 | ransomware_live | — |
| Maui Divers Jewelry | June 11, 2026 | ransomware_live | — |
| Metro Electric | June 10, 2026 | ransomware_live | — |
| TagleRock Technologies | June 10, 2026 | ransomware_live | — |
| C.C. Creations | June 10, 2026 | ransomware_live | — |
| SAMES | June 10, 2026 | ransomware_live | — |
| JV Equipment | June 10, 2026 | ransomware_live | — |
| Milstein Siegel | June 10, 2026 | ransomware_live | — |
| Wright Constable & Skeen | June 10, 2026 | ransomware_live | — |
| Teserra Outdoors | June 10, 2026 | ransomware_live | — |
| dbHMS | June 10, 2026 | ransomware_live | — |
| Dulany Leahy Curtis & Brophy | June 10, 2026 | ransomware_live | — |
| Bekman Marder Hopper Malarkey & Perlin | June 10, 2026 | ransomware_live | — |
| Efficient Home | June 10, 2026 | ransomware_live | — |
| Iliff | June 10, 2026 | ransomware_live | — |
| Miller & Zois | June 10, 2026 | ransomware_live | — |
| Plaxen & Adler | June 10, 2026 | ransomware_live | — |
| AltaVista Strategic Partners | June 10, 2026 | ransomware_live | — |
| Shipping Association of NY and NJ | June 8, 2026 | ransomware_live | — |
| Opera Comique | June 8, 2026 | ransomware_live | — |
| Isuzu Motors | June 8, 2026 | ransomware_live | — |
| SatCom CX | June 8, 2026 | ransomware_live | — |
| Kinetic Education | June 8, 2026 | ransomware_live | — |
| The Banyans Health and Wellness | June 8, 2026 | ransomware_live | — |
| INTERSPA Betriebsverwaltungsgesellschaft | June 5, 2026 | ransomware_live | — |
| Swim-Mor Pools | June 5, 2026 | ransomware_live | — |
| Ontario Home Builders' Association | June 5, 2026 | ransomware_live | — |
| Jay's Catering | June 5, 2026 | ransomware_live | — |
| Pro-MEC Engineering Services | June 5, 2026 | ransomware_live | — |
| Central Florida Cosmetic & Family Dentistry | June 5, 2026 | ransomware_live | — |
| Trican | June 4, 2026 | ransomware_live | — |
| Avcon Jet | June 4, 2026 | ransomware_live | — |
| SKUPINA Don Don | June 4, 2026 | ransomware_live | — |
| MEISA - Sines | June 3, 2026 | ransomware_live | — |
| Eat Salad | June 3, 2026 | ransomware_live | — |
| MarketJoy | June 3, 2026 | ransomware_live | — |
| JNP ENG | June 3, 2026 | ransomware_live | — |
| Clinica Maitenes | June 2, 2026 | ransomware_live | — |
| Nova Medical Products | June 2, 2026 | ransomware_live | — |
| Martinez & Shanken | May 28, 2026 | ransomware_live | — |
| Osool Poultry | May 28, 2026 | ransomware_live | — |
| LA Woodworks | May 28, 2026 | ransomware_live | — |
| Dillon Family Medicine | May 28, 2026 | ransomware_live | — |
| Jens Jensen | May 28, 2026 | ransomware_live | — |
| Providence Medical Group | May 28, 2026 | ransomware_live | — |
| HumanEdge | May 28, 2026 | ransomware_live | — |
| Alamo Heights School District | May 28, 2026 | ransomware_live | — |
| Kennedy, McLaughlin & Associates | May 28, 2026 | ransomware_live | — |
| Gallun Snow Associates | May 28, 2026 | ransomware_live | — |
| Carton Craft Supply | May 28, 2026 | ransomware_live | — |
| Mindpath College Health | May 28, 2026 | ransomware_live | — |
| Sinomax USA | May 28, 2026 | ransomware_live | — |
| William Davis Homes | May 27, 2026 | ransomware_live | — |
| Roofing Solutions | May 27, 2026 | ransomware_live | — |
| Mainstreet Organization of REALTORS | May 27, 2026 | ransomware_live | — |
| Otthon Centrum | May 27, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).