qilin
First seen October 8, 2022Active2,413 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Milstein Siegel | June 10, 2026 | ransomware_live | — |
| Wright Constable & Skeen | June 10, 2026 | ransomware_live | — |
| Teserra Outdoors | June 10, 2026 | ransomware_live | — |
| dbHMS | June 10, 2026 | ransomware_live | — |
| Dulany Leahy Curtis & Brophy | June 10, 2026 | ransomware_live | — |
| Bekman Marder Hopper Malarkey & Perlin | June 10, 2026 | ransomware_live | — |
| Efficient Home | June 10, 2026 | ransomware_live | — |
| Iliff | June 10, 2026 | ransomware_live | — |
| Miller & Zois | June 10, 2026 | ransomware_live | — |
| Plaxen & Adler | June 10, 2026 | ransomware_live | — |
| AltaVista Strategic Partners | June 10, 2026 | ransomware_live | — |
| Shipping Association of NY and NJ | June 8, 2026 | ransomware_live | — |
| Opera Comique | June 8, 2026 | ransomware_live | — |
| Isuzu Motors | June 8, 2026 | ransomware_live | — |
| SatCom CX | June 8, 2026 | ransomware_live | — |
| Kinetic Education | June 8, 2026 | ransomware_live | — |
| The Banyans Health and Wellness | June 8, 2026 | ransomware_live | — |
| INTERSPA Betriebsverwaltungsgesellschaft | June 5, 2026 | ransomware_live | — |
| Swim-Mor Pools | June 5, 2026 | ransomware_live | — |
| Ontario Home Builders' Association | June 5, 2026 | ransomware_live | — |
| Jay's Catering | June 5, 2026 | ransomware_live | — |
| Pro-MEC Engineering Services | June 5, 2026 | ransomware_live | — |
| Central Florida Cosmetic & Family Dentistry | June 5, 2026 | ransomware_live | — |
| Trican | June 4, 2026 | ransomware_live | — |
| Avcon Jet | June 4, 2026 | ransomware_live | — |
| SKUPINA Don Don | June 4, 2026 | ransomware_live | — |
| MEISA - Sines | June 3, 2026 | ransomware_live | — |
| Eat Salad | June 3, 2026 | ransomware_live | — |
| MarketJoy | June 3, 2026 | ransomware_live | — |
| JNP ENG | June 3, 2026 | ransomware_live | — |
| Clinica Maitenes | June 2, 2026 | ransomware_live | — |
| Nova Medical Products | June 2, 2026 | ransomware_live | — |
| Martinez & Shanken | May 28, 2026 | ransomware_live | — |
| Osool Poultry | May 28, 2026 | ransomware_live | — |
| LA Woodworks | May 28, 2026 | ransomware_live | — |
| Dillon Family Medicine | May 28, 2026 | ransomware_live | — |
| Jens Jensen | May 28, 2026 | ransomware_live | — |
| Providence Medical Group | May 28, 2026 | ransomware_live | — |
| HumanEdge | May 28, 2026 | ransomware_live | — |
| Alamo Heights School District | May 28, 2026 | ransomware_live | — |
| Kennedy, McLaughlin & Associates | May 28, 2026 | ransomware_live | — |
| Gallun Snow Associates | May 28, 2026 | ransomware_live | — |
| Carton Craft Supply | May 28, 2026 | ransomware_live | — |
| Mindpath College Health | May 28, 2026 | ransomware_live | — |
| Sinomax USA | May 28, 2026 | ransomware_live | — |
| William Davis Homes | May 27, 2026 | ransomware_live | — |
| Roofing Solutions | May 27, 2026 | ransomware_live | — |
| Mainstreet Organization of REALTORS | May 27, 2026 | ransomware_live | — |
| Otthon Centrum | May 27, 2026 | ransomware_live | — |
| Hamister Group | May 26, 2026 | ransomware_live | — |
| Global Retool Group | May 24, 2026 | ransomware_live | — |
| ExpoCredit | May 24, 2026 | ransomware_live | — |
| P & G Trading | May 24, 2026 | ransomware_live | — |
| Alpert Slobin & Rubenstein | May 24, 2026 | ransomware_live | — |
| Alpha Group Holdings | May 24, 2026 | ransomware_live | — |
| Branded Products | May 24, 2026 | ransomware_live | — |
| Sponseller Group | May 24, 2026 | ransomware_live | — |
| Semgrep | May 22, 2026 | ransomware_live | — |
| Snyder Packaging | May 21, 2026 | ransomware_live | — |
| Vernon & Ginsburg | May 21, 2026 | ransomware_live | — |
| ROTO Immobilien | May 21, 2026 | ransomware_live | — |
| Vial Agro | May 20, 2026 | ransomware_live | — |
| Air Conditioning Florida & Mrdsllc & RTE Stucco & MR Drywall Services | May 20, 2026 | ransomware_live | — |
| Cz Collections | May 20, 2026 | ransomware_live | — |
| WNS Lowery | May 20, 2026 | ransomware_live | — |
| CJ Architects | May 20, 2026 | ransomware_live | — |
| Porter W Yett | May 20, 2026 | ransomware_live | — |
| Hamer Childs | May 20, 2026 | ransomware_live | — |
| RCR Industrial Flooring | May 18, 2026 | ransomware_live | — |
| Gartengestaltung Muller eU | May 18, 2026 | ransomware_live | — |
| Comercial Echave Turri Limitada | May 17, 2026 | ransomware_live | — |
| PNSB Insurance Brokers Sdn Bhd | May 17, 2026 | ransomware_live | — |
| Majlis Perbandaran Alor Gajah | May 17, 2026 | ransomware_live | — |
| Salter HealthCare | May 17, 2026 | ransomware_live | — |
| The Taylor Provisions | May 17, 2026 | ransomware_live | — |
| Monir Precision Monitoring | May 17, 2026 | ransomware_live | — |
| Fruits Queralt | May 17, 2026 | ransomware_live | — |
| Musée du Bas-Saint-Laurent | May 17, 2026 | ransomware_live | — |
| Buckeye Paper | May 17, 2026 | ransomware_live | — |
| CLINICA AVELLANEDA MEDICAL CENTER | May 16, 2026 | ransomware_live | — |
| Foot Solutions | May 15, 2026 | ransomware_live | — |
| Common Part Groupings | May 15, 2026 | ransomware_live | — |
| B.Care Medical Center | May 15, 2026 | ransomware_live | — |
| Menzies Group | May 15, 2026 | ransomware_live | — |
| Generation Life | May 15, 2026 | ransomware_live | — |
| Australian College of Business Intelligence | May 15, 2026 | ransomware_live | — |
| NR Engineering Co., Ltd. | May 15, 2026 | ransomware_live | — |
| Turner Supply | May 15, 2026 | ransomware_live | — |
| Fab-Masters | May 14, 2026 | ransomware_live | — |
| Schulte-Lindhorst GmbH & Co. | May 14, 2026 | ransomware_live | — |
| Belz Institutions | May 13, 2026 | ransomware_live | — |
| John G Yphantides A Professional Law | May 13, 2026 | ransomware_live | — |
| One Legal | May 13, 2026 | ransomware_live | — |
| Domaine Des Tournels | May 13, 2026 | ransomware_live | — |
| Johnson Carter Architects | May 13, 2026 | ransomware_live | — |
| LTJ Industrial Services | May 13, 2026 | ransomware_live | — |
| Brand X Hydrovac Services | May 13, 2026 | ransomware_live | — |
| Bluize | May 13, 2026 | ransomware_live | — |
| Mayer | May 13, 2026 | ransomware_live | — |
| Spirit Medical Transport | May 13, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).