About
Written by ThreatCluster from 110 storiesQilin is a ransomware group that encrypts victim data to extort payments and has been observed gaining access by exploiting a Palo Alto VPN vulnerability to create unauthorized VPN sessions. Victims total more than 2,000, with hits across sectors including Healthcare, Manufacturing, Technology, Business Services, and Financial Services, and in the United States, Canada, France, the United Kingdom, and Germany. Recent reporting shows a pattern of disruptive attacks on healthcare and cross-border operations, exemplified by the UK Synnovis attack that disrupted services across hospitals in June 2024 and was linked to a patient's death. A key individual linked to Qilin was extradited to Germany; he is suspected of extorting $165,000 in Bitcoin from a German logistics company after encrypting its data in September 2024.
Sectors: Manufacturing, Business Services, Technology · Countries: US, CA, FR
Recent victims
View all →| Victim | Sector | Country | Files | Views | Posted | Status |
|---|---|---|---|---|---|---|
| Via Credit Union viacu.org | Banking | US | — | — | Oct 16, 2026 | published |
| Keio Corporation | Business Services | JP | — | — | Oct 15, 2026 | countdown |
| Kemlows Diecasting Products Limited kemlows.co.uk | Business Services | GB | — | — | Oct 15, 2026 | countdown |
| Telcoe Federal Credit Union telcoe.com | Banking | US | 30 | — | Oct 15, 2026 | countdown |
| Segres Systec segres.com | Office Products Retail & Distribution | ES | — | — | Oct 15, 2026 | countdown |
| Shield Wall Systems of Florida shieldwsfl.com | Business Services | US | — | — | Oct 15, 2026 | countdown |
| The Excalibur Group theexcalibur-group.com | Business Services | US | — | — | Oct 15, 2026 | countdown |
| KD Corp kdcorporation.co.kr | Automotive Parts | KR | — | — | Oct 15, 2026 | countdown |
| Hocon Gas hocongas.com | Electricity, Oil & Gas | NG | — | — | Oct 15, 2026 | listed |
| HyperGen hypergeninc.com | Business Services | US | — | — | Oct 15, 2026 | listed |
| Chattanooga Shooting Supplies chattanoogashooting.com | Retail · Pennsylvania | US | — | — | Oct 15, 2026 | listed |
| Commune Du Tampon letampon.fr | Government | RE | — | — | Oct 16, 2026 | countdown |
| Brame Telecom brametelecom.com | Business Services | BR | — | — | Oct 15, 2026 | countdown |
| MOA Architecture moaarch.com | Architecture, Engineering & Design | SG | — | — | Oct 14, 2026 | published |
| Joliet Public Schools District 86 joliet86.org | Education | US | — | — | Oct 14, 2026 | countdown |
| The Golden Legacy Financing goldenfinancing.com | Banking | — | — | Oct 13, 2026 | countdown | |
| Iliff, Meredith, Wildberger & Brennan, P.C ilimer.com | Law Firms & Legal Services | US | — | — | Oct 13, 2026 | published |
| Milstein Siegel, LLC | Law Firms & Legal Services | US | — | — | Oct 13, 2026 | |
| Comisión Municipal de Agua Potable y Alcantarillado de Victoria comapavictoria.gob.mx | Business Services | MX | — | — | Oct 13, 2026 | countdown |
| RingSide Creative | Professional Services | US | — | — | Oct 12, 2026 | listed |
| ConAuto | Transportation | EC | — | — | Oct 12, 2026 | |
| Prodiel | Civil Engineering Construction | ES | — | — | Oct 12, 2026 | |
| CNESTEN kerix.net | Government & Defense | MA | — | — | Oct 11, 2026 | published |
| Friendship Christian School friendshipchristian.net | Education | US | — | — | Oct 11, 2026 | countdown |
| Confipetrol confipetrol.com | Business Services | CO | — | 959 | Oct 11, 2026 | published |
Found by ThreatCluster
174 total from our crawlListed on this group's leak site and not present in the aggregated feeds.