Skip to content
Leak-site post naming Willatt & Flickinger, captured by ThreatCluster

Willatt & Flickinger

qilin

Ransomware leak-site victim intelligence

Files
4,410
Views
2,329
Posted
Sep 27, 2026
Country
US
Industry
Law Firms & Legal Services

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The group qiLin claims it obtained HR and recruitment records, internal documentation and source code from Willatt & Flickinger, and the leak is published on the group's leak site. The leak page identifies Willatt & Flickinger as the victim and lists the publication status as published. The leak page also notes the victim domain as www.wfaustin.com.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.wfaustin.com

What was taken

Willatt & Flickinger

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
tox_token
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion_link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2
https://wikileaks2.com/
wikileaks_source
WikileaksV2 (https://wikileaks2.com/)

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "Willatt & Flickinger, pllc" with the subtitle "Attorneys at Law" and a heart icon.
onion leak page10 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion