Skip to content
Leak-site post naming Whitehouse, captured by ThreatCluster

Whitehouse

qilin

Ransomware leak-site victim intelligence · EN

Files
12
Posted
Aug 28, 2026
Countdown
Time till publication: 50h : 24m
Country
GB
Industry
Accounting Services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

The group qilin claims 12 files, all JPGs, were taken from Whitehouse Accounting Services (whitehouseandco.com). The leak page lists a TOX string, an onion service URL, and a Wikileaks link. The publication status is countdown, with 50 hours 24 minutes until publication, and the post is dated 2026-08-28.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
183
Domains
http://www.whitehouseandco.com

What was taken

Whitehouse Accounting Services

File types seen
jpg × 12
Sample files (12)
9a4f16e9f98a7f810b9fd8db8ddf164b.jpg
fbe20d2db23056baa8ac9e24439e4b63.jpg
08b7a182cc19f00396b0b827fcb66e9e.jpg
be9b6c90a6b2a3b90525f7522fa920fd.jpg
3def38d1ed62d13dbfe38e976016cc4a.jpg
a8bdd86131f28d0df438bb4ada222d16.jpg
c5f3696f0104bfef08e3c88e46aec687.jpg
301ab07f0a27530527b3eb0d64ada6d5.jpg
e5e13f08503e3ecbc763ebeeecf8ab37.jpg
447b040f1b490cac8581d52efa3b0ac5.jpg
7ffe146f92cc6a6d7bd864f5ef4eba91.jpg
c1749b98d42d579495c454430bc66172.jpg

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
tox
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
wikileaks
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a scenic landscape with a rock arch, accompanied by the text "Serving Clients Since 1992" and a company name at the top.
onion leak page123 KB