Skip to content
Leak-site post naming Thai Lion Air, captured by ThreatCluster
Back to victims

Thai Lion Air

qilin

Ransomware leak-site victim intelligence

Views
0
Posted
Oct 2, 2026
Countdown
187h 41m
Country
TH
Industry
Business Services

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Qilin claims Thai Lion Air data has been taken; the leak post does not specify the amount or the data types involved. The leak is in countdown publication status, with 315 hours 48 minutes until publication. The page identifies the victim via the domain lionairthai.com and includes an onion link, a WikileaksV2 reference, and a TOX contact.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
lionairthai.com
Platforms
onion WikileaksV2

What was taken

Thai Lion Air

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
onion_link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
Company url
http://www.lionairthai.com
WikileaksV2
https://wikileaks2.com/
Publication date
Oct 2, 2026
Time till publication
251h : 44m

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo of Lion Air featuring a stylized lion's head and wings on a red background.
onion leak page909 KB

Negotiation
Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68