THREAT ACTOR
QILIN_
ActiveQilin (also tracked as Agenda) is a Rust- and Go-based ransomware-as-a-service operation that emerged in 2022. The group attracted significant attention after the 2024 attack on London-based pathology provider Synnovis, which disrupted multiple NHS hospitals and led to thousands of postponed procedures.
For Ransomnews editorial coverage of QILIN, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
2,426
Victims tracked
3 / 640
Active mirrors
2022-10-08
First listing
2026-11-07
Most recent
Victims by year
- 2026 1,156
- 2025 1,029
- 2024 189
- 2023 46
- 2022 6
Leak site mirrors
640 mirrors tracked, 3 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onionQilin snapshot · 2023-02-17 14:02 -
24kckepr3tdbcomkimbov5nqv2alos6vmrmlxdr76lfmkgegukubctyd.onion -
wlh3dpptx2gt7nsxcor37a3kiyaiy6qwhdv7o6nl6iuniu5ycze5ydid.onionQilin snapshot · 2023-02-17 14:03 -
kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onionDDOS Protection snapshot · 2025-05-10 12:01 -
wikileaksv2.comWikiLeaks snapshot · 2024-07-09 02:01 -
ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onionQilin blog snapshot · 2026-11-07 06:18 -
85.209.11.49snapshot · 2024-12-10 19:05 -
188.119.66.189snapshot · 2024-12-10 19:05 -
31.41.244.100.WikiLeaks V2 - New Version of the Legendary WikiLeaks Project snapshot · 2025-04-18 17:16 -
ijzn3sicrcy7quixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvad.onionsnapshot · 2024-12-12 16:37 -
kbsqoiyihadmwczmxkbovk7ss2dcynitwhhfu5yw725dbogo5kthfaad.onionsnapshot · 2024-12-12 16:37 -
ftp.snapshot · 2025-03-03 19:24 -
ftp.snapshot · 2025-03-03 19:24 -
ugefls6xolqo6anb6jydjtwqbr5h3st2stfo6j4or2hp7ak5zypwq2yd.onionsnapshot · 2025-03-06 14:11 -
ftp.snapshot · 2025-04-17 19:26 -
6d453sm6732jpr5gjs6zrjzysurnmrwi67624goptyly2xuz2kmjixad.onionLogin snapshot · 2025-06-09 06:23 -
ftp.snapshot · 2025-06-03 15:31 -
ftp.snapshot · 2025-06-03 15:36 -
vn2untbh4etoqoc4rfsrzlautth7vm62swv7ohemsy4tgh3a4j5ykgyd.onionLogin snapshot · 2025-08-11 16:17 -
p2zg4yqlsflg77opdzcjiu3reyj3wx2owwez2tcyv3vemmz7wbyccyqd.onionLogin snapshot · 2025-10-10 17:14 -
ytdfc3dvgudgq4zyjwtipzbsu7arbiqvygfqdyqiygkvry2hy47oq2ad.onionLogin snapshot · 2025-10-30 06:01 -
22odvea7bampzr7k2dztbqda67fpau6hcy7sgn2npucaz5gcjmmzrgqd.onionsnapshot · 2025-07-24 15:57 -
ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onionSign In snapshot · 2025-08-12 21:28 -
z2rmyu57rkmlsfif4lovlz36ph7lxmjiawilmeryfoupwnbuplm4suqd.onionLogin snapshot · 2025-12-17 15:04 -
djixgstarlzvmqsqcewlsfxlqzwd3i2eqs24mccfrfvrhqihjmssahqd.onionLogin snapshot · 2026-03-10 17:27 -
zlubnjgvsf6ifxswnvpfgvp36tlzubzggn4txk5mi5qgt377ytzai6yd.onionLogin snapshot · 2025-10-05 12:02 -
ifjnyofk7xpdrqzp3pgyorwgoyrxjkjic4aqxcz4sjxjhbpewfoxngad.onionsnapshot · 2025-08-16 08:30 -
wikileaks2.siteWikiLeaks V2 - New Version of the Legendary WikiLeaks Project snapshot · 2025-12-16 07:03 -
ftp.snapshot · 2025-10-02 20:38 -
ftp.snapshot · 2025-10-30 19:00
Recent victims
The 50 most recent victims claimed by QILIN. Total in the index: 2,426.
| Date listed | Victim | Description |
|---|---|---|
| 2026-11-07 | Acondistec | Software |
| 2026-11-06 | Rotstein & Shiffman | Law Firms & Legal Services |
| 2026-11-05 | Insurance Audit Services | Insurance |
| 2026-11-05 | Calvary Christian College | Education |
| 2026-11-03 | Arthur Chapman Kettering Smetak Pikala PA | Law Firms & Legal Services |
| 2026-11-02 | Isapre Consalud | Insurance |
| 2026-11-02 | Astino Berhad | Building Materials |
| 2026-11-01 | fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie | Healthcare Services |
| 2026-11-01 | Global Holding | Freight & Logistics Services |
| 2026-11-01 | Shibata Co., Ltd. | Electronics |
| 2026-11-01 | Meshbesher & Spence | Law Firms & Legal Services |
| 2026-11-01 | BKV Vasúti Jármjavító Kft | Industrial Machinery & Equipment |
| 2026-11-01 | Forum | Architecture, Engineering & Design |
| 2026-11-01 | Select Community Management | Real Estate |
| 2026-11-01 | CMD Naturkosmetik | Consumer Services |
| 2026-11-01 | qc-consult | Business Services |
| 2026-11-01 | Danser | Building Materials |
| 2026-10-31 | Community Medical Center, Falls City Nebraska | 0 |
| 2026-10-30 | TRAUCO AG | Building Materials |
| 2026-10-30 | Honghwa International | Electronics |
| 2026-10-30 | Richland Resources Corporation | Electricity, Oil & Gas |
| 2026-10-30 | Sistemas Visuales 360 | Electricity, Oil & Gas |
| 2026-10-30 | Societe Ivoirienne De Telediffusion | Broadcasting |
| 2026-10-30 | Palletline | Freight & Logistics Services |
| 2026-10-30 | Light Rail Manila | Business Services |
| 2026-10-30 | Farmacia I | Advertising & Marketing |
| 2026-10-30 | Grupo Ciosa, SAPI de CV | Business Services |
| 2026-10-30 | iFink | Finance |
| 2026-10-30 | Innoe Asesores | Business Services |
| 2026-10-29 | Udima | Education |
| 2026-10-29 | W Interactive | Software |
| 2026-10-29 | Proterial | Building Materials |
| 2026-10-29 | City of Columbia, SC | Government |
| 2026-10-27 | NuVista Federal Credit Union | Banking |
| 2026-10-27 | Hawaii Law Enforcement Fedral Credit Union | Finance |
| 2026-10-26 | RaceTrakka | Business Services |
| 2026-10-26 | Smith Feddeler & Smith | Law Firms & Legal Services |
| 2026-10-25 | Ooredoo Myanmar | Advertising & Marketing |
| 2026-10-25 | White & Case | Law Firms & Legal Services |
| 2026-10-25 | Hossner-Textil GmbH | Business Services |
| 2026-10-25 | ECOM | Agriculture |
| 2026-10-25 | ETO | Automotive Parts |
| 2026-10-24 | Castle Howard Estate | Business Services |
| 2026-10-24 | Heber City, UT | Government |
| 2026-10-24 | SLTN Inter Access | Business Services |
| 2026-10-24 | Commonwealth Community Bank | Banking |
| 2026-10-23 | von Schaewen | Industrial Machinery & Equipment |
| 2026-10-23 | Tamponnt | Business Services |
| 2026-10-23 | Revi Group | Manufacturing |
| 2026-10-23 | Labaid Cancer Hospital And Super Speciality Center | 0 |
CONFIRMED ATTACKS
Qilin confirmed attacks: 348 verified incidents
Ransomnews has verified 348 Qilin incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from September 2022 to September 2026. United States accounts for 164 of them (47%), with victims recorded in 45 countries in total. The most affected sector is healthcare, at 62 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 33; the outcome is unrecorded in the remaining 315. Where a figure was disclosed (117 cases), these incidents account for 7,922,776 exposed records.
348Verified incidents
45Countries
2022–2026Active range
0%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Qilin incidents (100 most recent of 348)
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| September 2026 | Ikegami Tsushinki Co., Ltd. | Manufacturing | Tokyo, Japan | — | Unknown | Source |
| September 2026 | Grup Excursionista i Esportiu Gironí (GEiEG) | Other | Girona, Spain | — | Unknown | Source |
| September 2026 | Partners Group SK | Finance | Bratislava, Slovakia | — | Unknown | Source |
| September 2026 | SK Logistics Co., Ltd. | Transportation | Osaka, Japan | — | Unknown | Source |
| August 2026 | Connections | Other | Vilvoorde, Belgium | — | Unknown | Source |
| August 2026 | Commission de la construction du Québec | Government | Quebec, Canada | — | Unknown | Source |
| August 2026 | Uşak Üniversitesi | Education | Usak, Turkey | 3,000 | Unknown | Source |
| August 2026 | Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) | Government | District of Columbia, United States | — | Unknown | Source |
| August 2026 | Brazosport College | Education | Texas, United States | — | Unknown | Source |
| August 2026 | Impact Centre Chrétien | Other | Croissy-Beaubourg, France | — | Unknown | Source |
| August 2026 | Depona AB | Service | Stockholm, Sweden | — | Unknown | Source |
| August 2026 | Filtronic | Manufacturing | Sedgefield, United Kingdom | — | Unknown | Source |
| August 2026 | WEBA | Retail | Gent, Belgium | — | No | Source |
| August 2026 | Berlin Brandenburgische Wohnungsbaugenossenschaft eG | Other | Berlin, Germany | — | Unknown | Source |
| August 2026 | Loescher Editore | Other | Turin, Italy | — | Unknown | Source |
| August 2026 | Stade Français | Other | Paris, France | — | Unknown | Source |
| July 2026 | Hawaii Family Dental | Healthcare | Hawaii, United States | 45,853 | Unknown | Source |
| July 2026 | Zanichelli Editore S.p.A. | Other | Bologna, Italy | — | Unknown | Source |
| July 2026 | INVENSITY GmbH | Service | Wiesbaden, Germany | — | No | Source |
| July 2026 | Newton County Schools | Education | Georgia, United States | — | Unknown | Source |
| July 2026 | Mera Metal S.A. | Manufacturing | Warsaw, Poland | — | Unknown | Source |
| July 2026 | Pennant Hills Golf Club | Other | Sydney, Australia | — | Unknown | Source |
| July 2026 | rehaVital Gesundheitsservice GmbH | Healthcare | Hamburg, Germany | — | Unknown | Source |
| July 2026 | Universitatea de Vest "Vasile Goldiș” din Arad | Education | Arad, Romania | — | Unknown | Source |
| July 2026 | Asset Flooring Group Australia | Service | Hallam, Australia | — | Unknown | Source |
| July 2026 | Groupe Fenwick | Manufacturing | Gennevilliers, France | — | Unknown | Source |
| July 2026 | Ville de Drancy | Government | Drancy, France | — | No | Source |
| June 2026 | The Nueva School | Education | California, United States | — | No | Source |
| June 2026 | Revista Semana | Other | Madrid, Spain | — | Unknown | Source |
| June 2026 | GSW Gemeinschaftsstadtwerke GmbH | Utilities | Kamen, Germany | — | Unknown | Source |
| June 2026 | Retelit S.p.A. | Utilities | Milan, Italy | — | Unknown | Source |
| June 2026 | Nacionalni park Plitvička jezera (Plitvice Lakes National Park) | Government | Plitvička Jezera, Croatia | — | Unknown | Source |
| June 2026 | Acosol S.A. | Government | Marbella, Spain | — | Unknown | Source |
| June 2026 | Musashino University | Education | Tokyo, Japan | — | No | Source |
| June 2026 | Bajaj Auto | Manufacturing | Pune, India | — | Unknown | Source |
| June 2026 | Misericórdia de Santo Tirso | Healthcare | Santo Tirso, Portugal | — | Unknown | Source |
| June 2026 | Central Bank of Libya | Government | Tripoli, Libya | — | Unknown | Source |
| May 2026 | Shipping Association of New York and New Jersey | Transportation | New Jersey, United States | — | Unknown | Source |
| May 2026 | Plaxen Adler Muncy, P.A. | Legal | Maryland, United States | 10,017 | Unknown | Source |
| May 2026 | Roth Industries GmbH & Co. KG | Manufacturing | Dautphetal, Germany | — | Unknown | Source |
| May 2026 | Australian College of Business Intelligence | Education | Sydney, Australia | — | Unknown | Source |
| May 2026 | Kennedy McLaughlin & Associates | Finance | Spring Hill, Australia | — | Unknown | Source |
| May 2026 | Mediapost | Service | Madrid, Spain | — | Unknown | Source |
| May 2026 | Ville d’Eyguières | Government | Eyguières, France | — | Unknown | Source |
| May 2026 | Bluize | Technology | Somerton, Australia | — | Unknown | Source |
| May 2026 | Menzies Group Pty Ltd | Service | Malvern, Australia | — | Unknown | Source |
| May 2026 | Schulte-Lindhorst GmbH & Co. | Transportation | Rietberg, Germany | — | Unknown | Source |
| May 2026 | Ville de Quiberon | Government | Quiberon, France | — | No | Source |
| April 2026 | See's Candies, Inc. | Food and Beverage | California, United States | 23,737 | Unknown | Source |
| April 2026 | Sysco Corporation | Food and Beverage | Texas, United States | 1,468 | Unknown | Source |
| April 2026 | City of Sandstone | Government | Minnesota, United States | — | Unknown | Source |
| April 2026 | Leone Film Group S.p.A. | Other | Rome, Italy | — | Unknown | Source |
| April 2026 | Generation Life | Finance | Melbourne, Australia | — | Unknown | Source |
| April 2026 | Tokyo Hoso Kogyo Corporation | Construction | Tokyo, Japan | — | Unknown | Source |
| April 2026 | Ahorramas, S.A. | Food and Beverage | Madrid, Spain | — | Unknown | Source |
| April 2026 | Cooperativa de Hospitales de Antioquia (COHAN) | Healthcare | Medellin, Colombia | — | Unknown | Source |
| April 2026 | Travel Expert (Asia) Enterprises Limited | Service | Hong Kong, Hong Kong | — | Unknown | Source |
| March 2026 | HumanEdge, Inc. | Service | New York, United States | 58,596 | Unknown | Source |
| March 2026 | Enviaseo E.S.P | Government | Envigado, Colombia | — | Unknown | Source |
| March 2026 | DENSO | Manufacturing | Kariya, Japan | — | Unknown | Source |
| March 2026 | Rusk County | Government | Wisconsin, United States | — | Unknown | Source |
| March 2026 | Heister Gruppe | Retail | Trier, Germany | — | Unknown | Source |
| March 2026 | City of Seal Beach and Seal Beach Police Department | Government | California, United States | — | Unknown | Source |
| March 2026 | Alamo Heights Independent School District | Education | Texas, United States | 26,629 | Unknown | Source |
| March 2026 | Netalia Srl | Technology | Genoa, Italy | — | Unknown | Source |
| March 2026 | Die Linke | Other | Berlin, Germany | — | Unknown | Source |
| March 2026 | Aroostook Mental Health Services, Inc. | Healthcare | Maine, United States | 501 | No | Source |
| March 2026 | LISI Group | Manufacturing | Grandvillars, France | — | Unknown | Source |
| March 2026 | Duffy’s Sports Grill | Food and Beverage | Florida, United States | — | Unknown | Source |
| March 2026 | Higashiyama Industries Co., Ltd. | Retail | Tokyo, Japan | — | Unknown | Source |
| March 2026 | Arbeiter-Samariter-Bund (ASB) | Other | Cologne, Germany | — | Unknown | Source |
| March 2026 | Suchthilfe direkt Essen gGmbH | Healthcare | Essen, Germany | — | Unknown | Source |
| February 2026 | Orange Madagascar | Utilities | Antananarivo, Madagascar | — | Unknown | Source |
| February 2026 | Tripod Farmers | Food and Beverage | Bacchus Marsh, Australia | — | Unknown | Source |
| February 2026 | RENAFAN GmbH | Healthcare | Tegel, Germany | — | Unknown | Source |
| February 2026 | Kroll International, LLC | Retail | Michigan, United States | — | Unknown | Source |
| February 2026 | Graneles de Chile S.A. | Transportation | O'Higgins, Chile | — | Unknown | Source |
| February 2026 | CONPET S.A. | Government | Ploiești, Romania | — | Unknown | Source |
| February 2026 | Anabuki Housing Service Co., Ltd. | Service | Takamatsu, Japan | 207,773 | Unknown | Source |
| January 2026 | Orthopaedic Specialists of Massachusetts | Healthcare | Massachusetts, United States | 20,200 | Unknown | Source |
| January 2026 | FMRS Health Systems, Inc. | Healthcare | West Virginia, United States | — | Unknown | Source |
| January 2026 | JC Resorts LLC | Other | California, United States | 5,942 | Unknown | Source |
| January 2026 | Transport Workers Union Local 100 | Other | New York, United States | 46,408 | Unknown | Source |
| January 2026 | Rocky Mountain Care | Healthcare | Utah, United States | — | Unknown | Source |
| January 2026 | Segue Manufacturing Services LLC | Manufacturing | Massachusetts, United States | 400 | Unknown | Source |
| January 2026 | O. Berk Company of New England LLC | Retail | New Jersey, United States | — | Unknown | Source |
| January 2026 | Sakata Seed America, Inc. | Retail | California, United States | — | Unknown | Source |
| January 2026 | Herren Caflisch Rutsch - Notariat & Verwaltungen | Legal | Bern, Switzerland | — | Unknown | Source |
| January 2026 | Kouei Co., Ltd. | Manufacturing | Tokyo, Japan | — | Unknown | Source |
| January 2026 | Tulsa International Airport | Government | Oklahoma, United States | — | Unknown | Source |
| January 2026 | Cooperativa de Hostelería de Navarra | Retail | Burlada, Spain | — | Unknown | Source |
| January 2026 | HARTE-BAVENDAMM Rechtsanwälte PartG mbB | Legal | Hamburg, Germany | — | Unknown | Source |
| January 2026 | Y.C.C. Parts MFG Co., Ltd. | Manufacturing | Lukang, Taiwan | — | Unknown | Source |
| December 2025 | Goodwin University | Education | Connecticut, United States | 56,156 | Unknown | Source |
| December 2025 | Eanes Independent School District | Education | Texas, United States | 9,506 | Unknown | Source |
| December 2025 | Earthbound Holding LLC | Retail | Texas, United States | 6,766 | Unknown | Source |
| December 2025 | France Terre d'Asile | Other | Paris, France | — | Unknown | Source |
| December 2025 | Bangchak Corporation Public Company Limited | Other | Bangkok, Thailand | — | Unknown | Source |
| December 2025 | Evergreen Printing Company | Service | New Jersey, United States | — | Unknown | Source |
| December 2025 | Haxx | Other | Madrid, Spain | — | No | Source |
Claimed vs confirmed. The figures above the fold on this page come from Qilin's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.