Leak site of qilin, captured by ThreatCluster

qilin

Active

25 tracked victims · First seen Oct 8, 2022 · Last seen Sep 4, 2026

About

Written by ThreatCluster from 118 stories

Qilin is a ransomware group that operates an extortion-driven model, breaching targets and pressuring victims by releasing stolen data and proof of compromise, including publishing identity documents to demonstrate access. Victims total more than 2,000 across sectors such as Manufacturing, Technology, Healthcare, Business Services, and Financial Services, with the US, France, Canada, the United Kingdom, and Germany most frequently targeted. A recurring pattern in recent reporting shows the group using public proof of breach and ransom deadlines to pressure payments, illustrated by the Stade Francais attack in which 18 players’ identity documents were published and a ten-day ransom deadline was issued.

Sectors: Manufacturing, Business Services, Technology · Countries: US, CA, FR

Recent victims

View all →
Victim Sector Country Data Files Views Posted Status
AP CAPITAL PARTNERS LIMITED Financial Services Sep 4, 2026
Commission de la construction du Quebec (CCQ) Government & Defense CA 980.00 GB Sep 4, 2026
Complete Packaging Solutions
completepackaginggroup.com
Business Services Aug 31, 2026 listed
Tanner
tanner.cl
Finance CL Sep 2, 2026 countdown
Uak University
usak.edu.tr
Education TR Sep 2, 2026 listed
Grayson Rural Electric Cooperative
graysonrecc.com
Electricity, Oil & Gas US Sep 2, 2026 listed
Commission de la construction du Quebec
ccq.org
Government CA Aug 31, 2026 countdown
Inmac
inmac.com.ar
Architecture, Engineering & Design AR Aug 31, 2026 listed
Allied Recycling
alliedrecycling.ie
Energy, Utilities & Waste IE Aug 31, 2026 listed
AFSARD
ipardpa.gov.mk
Finance MK Aug 30, 2026 listed
Crystalpharmatech
crystalbiosolutions.com
Business Services 200.00 GB Aug 30, 2026 listed
Absolute Consultancy Services
absolutecs.co.uk
Business Services GB Aug 30, 2026 listed
Black Cat Engineering Construction Wll
blackcat.com.qa
Civil Engineering Construction QA Aug 30, 2026 countdown
Bandit Industries
banditchippers.com
Accounting Services US 314,500 Aug 29, 2026 countdown
LAPoco Architects
laparchitects.com
Architecture, Engineering & Design US 336 Aug 29, 2026 listed
Neumaticos Corral S.A.
neumaticoscorral.com.ar
Automotive Parts AR Aug 29, 2026 countdown
The Frame Group
framegroup.com.au
Business Services AU 430 Aug 29, 2026 listed
La Maison Des Travaux
lamaisondestravaux.com
Business Services FR 423 Aug 29, 2026 listed
BLISS 1041
bliss1041.com
Accounting Services MT 429 Aug 29, 2026 listed
CareClinics
careclinics.com.my
0 MY 441 Aug 29, 2026 listed
AUM Construction
auminc.us
Electricity, Oil & Gas US 427 Aug 29, 2026 listed
Alter Consultores Legales
alterconsultores.es
Law Firms & Legal Services ES Aug 28, 2026 listed
Newton County School System
newtoncountyschools.org
Education US Aug 28, 2026 countdown
DigiGround
digiground.com.au
Business Services AU 1,703 Aug 28, 2026 listed
Tramigo
tramigo.com
Software FI 1,663 Aug 28, 2026 listed

All ransomware groups · Dark web intelligence