Skip to content
Leak-site post naming Resolve Law Group, captured by ThreatCluster

Resolve Law Group

qilin

Ransomware leak-site victim intelligence

Files
22
Views
5,499
Posted
Sep 15, 2026
Countdown
15h : 49m
Country
US
Industry
Law Firms & Legal Services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, our reporting

Qilin claims to have taken 22 files from Resolve Law Group, with 22 sample JPGs published on the leak site. The victim is Resolve Law Group, a law firm (domain resolvelawgroup.com). The leak page shows a countdown toward publication (Publication status: countdown) with 47 hours 36 minutes remaining. ThreatCluster's reporting places this incident in the context of broader ransomware activity reported on 2026-09-15, with Qilin named among the groups.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.resolvelawgroup.com

What was taken

Resolve Law Group

File types seen
jpg × 22
Sample files (22)
a6193ac4b2faec3a2726af3a51be7a48.jpg
5f066352f986e90dd6166ea991ed75a1.jpg
40c9c20efb1fc2bc0e1cae14d14745b9.jpg
5a50316ff123660f3d3d76d84d532649.jpg
6e861cc7971954b3ce2a46bf289376ac.jpg
b6e4ebf4ddd3c95b9dee9882a476a8d2.jpg
33974fd4794eb5d310b7189369dd8685.jpg
4cdbe1ebd8df418220216238c47e325f.jpg
63c348131229b52ba03e0e46595ed289.jpg
9aace0d98f84a7fa09a17b922e9d9b1e.jpg
5c2cafbb6126cbfa9d21c0d9bcc949e8.jpg
a0c5ca9315fe663076c9c1a523b69739.jpg
00abb5c4954180e56558391e94c15f03.jpg
b0f960de6e06b91bacb7d6c8ab9c34d8.jpg
beb2ea48d6f487f51ab2d0d37fd8bd5c.jpg
5ee669a3c6729a76c5feb13459f6c21f.jpg
8988768280927a3d795886e9ee93219b.jpg
c9e189e91d256db9fbe739633912246f.jpg
56287b8e1fdd74641f3409812732c7e8.jpg
7cf1ed566e3e96bf112f377dd0b2cf60.jpg
e1a4ece8d30039ec078db1ae7ff2e7c9.jpg
4aea4be433cc0409efec46614d4559b7.jpg

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2
https://wikileaks2.com/
image_count
22
wikileaks_source
WikileaksV2 (https://wikileaks2.com/)

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Scan of a U.S. passport card showing personal details, including a photo, name, date of birth, and issue/expiration dates.
onion leak page48 KB
Document titled "Bankruptcy Department POC Reconciliation Training Manual" from Ocwen Financial Corporation, dated 2015, with a version control box and confidentiality notice.
onion leak page27 KB
Screenshot of a payslip detailing company information, pay period, gross pay, deductions, and net pay.
onion leak page47 KB
Screenshot of an official form titled "Statement of Your Current Monthly Income" with sections for income details and financial information.
onion leak page32 KB
Document titled "Notice of Bankruptcy Case Filing" with details about the bankruptcy case, including debtor names and court information.
onion leak page30 KB
Screenshot of a payroll statement detailing employee earnings, deductions, and tax information for a specific pay period.
onion leak page59 KB
Scan of a U.S. passport featuring a photo, personal details, and an eagle emblem.
onion leak page42 KB
Scan of a U.S. passport featuring a photograph, personal details, and an eagle emblem.
onion leak page39 KB
Document titled "NOTICE OF CONFIDENTIAL INFORMATION WITHIN COURT FILING" with legal formatting, including case details and instructions regarding confidential information.
onion leak page29 KB
Directory listing of files with names, associated codes, and various document types, including references to chapters and organizations.
onion leak page98 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion