Skip to content
Qilin Ransomware Operative Extradited to Germany After Arrest in Japan

Qilin Ransomware Operative Extradited to Germany After Arrest in Japan

First seen 6 Oct 2026, 10:27 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 6, 2026 at 11:27 UTC
  • •A Russian national linked to Qilin was arrested in Japan and extradited to Germany.
  • •He is accused of extorting a German logistics firm for $165,000 in Bitcoin.
  • •Qilin has been responsible for multiple high-profile ransomware attacks, including one on Asahi Group.

A 28-year-old Russian national, a core member of the ransomware group Qilin, was detained in Osaka, Japan, in May 2025 and extradited to Germany on October 2, 2026. He is accused of extorting a German logistics company by accessing its systems in September 2024 and demanding $165,000 in Bitcoin to prevent the release of encrypted data. Qilin, known for its extensive ransomware operations, claimed responsibility for a significant attack on Asahi Group Holdings in September 2025, disrupting operations at multiple facilities. The suspect's arrest was facilitated by international cooperation among law enforcement agencies, highlighting the ongoing efforts to combat cross-border cybercrime. Qilin has been active since mid-2022, with reports indicating it has targeted numerous organizations globally, making it one of the most prolific ransomware groups.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2024-09
Data breach at German logistics company
The suspect allegedly accessed and encrypted data, demanding a ransom in Bitcoin.
Finance.Biggo
2025-05
Suspect detained in Osaka
Japanese authorities arrested the suspect while he was visiting Osaka as a tourist.
Asahi
2025-09
Qilin claims Asahi Group attack
Qilin announced responsibility for a ransomware attack that disrupted operations at Asahi Group Holdings.
Finance.Biggo
2026-10-02
Extradition to Germany completed
The suspect was handed over to German authorities following a Tokyo High Court ruling.
Asahi

More articles in this cluster (3)

Following this threat?

Track Qilin and Asahi Group Holdings in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3

Common questions

What charges does the suspect face?
The suspect is charged with extortion related to a ransomware attack on a German logistics company.
How has Qilin impacted businesses?
Qilin has caused significant disruptions, including a major attack on Asahi Group that affected multiple facilities.
What measures are being taken against Qilin?
International law enforcement agencies are collaborating to investigate and apprehend members of Qilin.