Skip to content
Leak-site post naming The Fifty/50, captured by ThreatCluster

The Fifty/50

qilin

Ransomware leak-site victim intelligence

Data size
400.00 GB
Files
27,478
Views
10,484
Posted
Sep 22, 2026
Country
US
Industry
Hospitality

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, our reporting

The leak post by the QILIN group claims 400.00 GB of data and 27,478 files from The Fifty/50 (www.thefifty50.com), a hospitality-sector organization. Sample filenames published include pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion, with onion listed as the file type. The leak page describes the leak as Hospitality and shows a countdown publication status with about 217 hours 47 minutes remaining until publication.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
TOX WikileaksV2

What was taken

The Fifty/50 Hospitality

File types seen
onion × 1
Sample files (2)
pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion_link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
wikileaks_link
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page17 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68