THREAT ACTOR
QILIN_
DormantQilin (also tracked as Agenda) is a Rust- and Go-based ransomware-as-a-service operation that emerged in 2022. The group attracted significant attention after the 2024 attack on London-based pathology provider Synnovis, which disrupted multiple NHS hospitals and led to thousands of postponed procedures.
For Ransomnews editorial coverage of QILIN, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
2,277
Victims tracked
0 / 640
Active mirrors
2022-10-08
First listing
2026-09-22
Most recent
Victims by year
- 2026 1,007
- 2025 1,029
- 2024 189
- 2023 46
- 2022 6
Leak site mirrors
640 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onionQilin snapshot · 2023-02-17 14:02 -
24kckepr3tdbcomkimbov5nqv2alos6vmrmlxdr76lfmkgegukubctyd.onion -
wlh3dpptx2gt7nsxcor37a3kiyaiy6qwhdv7o6nl6iuniu5ycze5ydid.onionQilin snapshot · 2023-02-17 14:03 -
kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onionDDOS Protection snapshot · 2025-05-10 12:01 -
wikileaksv2.comWikiLeaks snapshot · 2024-07-09 02:01 -
ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onionQilin blog snapshot · 2026-09-22 23:04 -
85.209.11.49snapshot · 2024-12-10 19:05 -
188.119.66.189snapshot · 2024-12-10 19:05 -
31.41.244.100.WikiLeaks V2 - New Version of the Legendary WikiLeaks Project snapshot · 2025-04-18 17:16 -
ijzn3sicrcy7quixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvad.onionsnapshot · 2024-12-12 16:37 -
kbsqoiyihadmwczmxkbovk7ss2dcynitwhhfu5yw725dbogo5kthfaad.onionsnapshot · 2024-12-12 16:37 -
ftp.snapshot · 2025-03-03 19:24 -
ftp.snapshot · 2025-03-03 19:24 -
ugefls6xolqo6anb6jydjtwqbr5h3st2stfo6j4or2hp7ak5zypwq2yd.onionsnapshot · 2025-03-06 14:11 -
ftp.snapshot · 2025-04-17 19:26 -
6d453sm6732jpr5gjs6zrjzysurnmrwi67624goptyly2xuz2kmjixad.onionLogin snapshot · 2025-06-09 06:23 -
ftp.snapshot · 2025-06-03 15:31 -
ftp.snapshot · 2025-06-03 15:36 -
vn2untbh4etoqoc4rfsrzlautth7vm62swv7ohemsy4tgh3a4j5ykgyd.onionLogin snapshot · 2025-08-11 16:17 -
p2zg4yqlsflg77opdzcjiu3reyj3wx2owwez2tcyv3vemmz7wbyccyqd.onionLogin snapshot · 2025-10-10 17:14 -
ytdfc3dvgudgq4zyjwtipzbsu7arbiqvygfqdyqiygkvry2hy47oq2ad.onionLogin snapshot · 2025-10-30 06:01 -
22odvea7bampzr7k2dztbqda67fpau6hcy7sgn2npucaz5gcjmmzrgqd.onionsnapshot · 2025-07-24 15:57 -
ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onionSign In snapshot · 2025-08-12 21:28 -
z2rmyu57rkmlsfif4lovlz36ph7lxmjiawilmeryfoupwnbuplm4suqd.onionLogin snapshot · 2025-12-17 15:04 -
djixgstarlzvmqsqcewlsfxlqzwd3i2eqs24mccfrfvrhqihjmssahqd.onionLogin snapshot · 2026-03-10 17:27 -
zlubnjgvsf6ifxswnvpfgvp36tlzubzggn4txk5mi5qgt377ytzai6yd.onionLogin snapshot · 2025-10-05 12:02 -
ifjnyofk7xpdrqzp3pgyorwgoyrxjkjic4aqxcz4sjxjhbpewfoxngad.onionsnapshot · 2025-08-16 08:30 -
wikileaks2.siteWikiLeaks V2 - New Version of the Legendary WikiLeaks Project snapshot · 2025-12-16 07:03 -
ftp.snapshot · 2025-10-02 20:38 -
ftp.snapshot · 2025-10-30 19:00
Recent victims
The 50 most recent victims claimed by QILIN. Total in the index: 2,277.
| Date listed | Victim | Description |
|---|---|---|
| 2026-09-22 | Textile City | Home Improvement & Hardware Retail |
| 2026-09-22 | The Fifty/50 | Hospitality |
| 2026-09-22 | Columbus Informatica | Software |
| 2026-09-21 | Telrad Networks | Manufacturing |
| 2026-09-21 | IKEGAMI TSUSHINKI COMPANY LIMITED | Electronics |
| 2026-09-20 | Zorlu Holding | Holding Companies & Conglomerates |
| 2026-09-20 | ShopDunk | Business Services |
| 2026-09-20 | KMLS | Construction |
| 2026-09-20 | Touring Club Suisse | Hospitality |
| 2026-09-18 | Ascend Com | Business Services |
| 2026-09-18 | Ceres Tolvas | Business Services |
| 2026-09-18 | Futuro Forestal | Agriculture |
| 2026-09-18 | Grupo Juste | Manufacturing |
| 2026-09-18 | Inland and Offshore Contractors | Civil Engineering Construction |
| 2026-09-17 | Vigatec | Business Services |
| 2026-09-17 | Invincible GG | Business Services |
| 2026-09-17 | Techwise | Business Services |
| 2026-09-17 | The Gran Hotel Ingles | Hospitality |
| 2026-09-16 | Reddrop Group | Grocery Retail |
| 2026-09-16 | In The Company of Huskies | Advertising & Marketing |
| 2026-09-16 | Thorndale Foundation | Non-Profit & Charitable Organizations |
| 2026-09-16 | Thema Foundries | Business Services |
| 2026-09-16 | Aarsleff | Construction |
| 2026-09-15 | Montana Civil Contractors | Civil Engineering Construction |
| 2026-09-15 | Taurus Ibérica | Real Estate |
| 2026-09-15 | ADM | Food & Beverage |
| 2026-09-15 | Resolve Law Group | Law Firms & Legal Services |
| 2026-09-15 | Incrys | Business Services |
| 2026-09-15 | Bravo Group | Freight & Logistics Services |
| 2026-09-15 | Geieg | Fitness & Dance Facilities |
| 2026-09-14 | RoadEx America | Freight & Logistics Services |
| 2026-09-14 | Foremost Mfg | Building Materials |
| 2026-09-14 | Winston Contracting, LLC | Business Services |
| 2026-09-14 | Minmer Global | Freight & Logistics Services |
| 2026-09-14 | Vitar Group | Electronics |
| 2026-09-14 | Alicotrans | Freight & Logistics Services |
| 2026-09-13 | Gilco Scaffolding | Construction |
| 2026-09-13 | CARIDRO VAL DE LOIRE | Business Services |
| 2026-09-12 | Imperial Healthcare Solutions | Healthcare Services |
| 2026-09-09 | Mitsuwa Trading Co., Ltd | Business Services |
| 2026-09-09 | Jet Specialty | Industrial Machinery & Equipment |
| 2026-09-08 | Alaska Electrical Apprenticeship | Education |
| 2026-09-07 | Partners Group SK | Finance |
| 2026-09-07 | Jbc | Hand, Power & Lawn-care Tools |
| 2026-09-05 | Philippine Ports Authority | Business Services |
| 2026-09-05 | Bauman Law Group | Law Firms & Legal Services |
| 2026-09-05 | Jouvet SAS | Construction |
| 2026-09-05 | G&S Technologies | Energy, Utilities & Waste |
| 2026-09-05 | Nolan Consulting Group | Business Services |
| 2026-09-05 | Colonial Hyundai | Automotive Parts |
CONFIRMED ATTACKS
Qilin confirmed attacks: 339 verified incidents
Ransomnews has verified 339 Qilin incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from September 2022 to August 2026. United States accounts for 159 of them (47%), with victims recorded in 44 countries in total. The most affected sector is healthcare, at 61 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 31; the outcome is unrecorded in the remaining 308. Where a figure was disclosed (109 cases), these incidents account for 6,811,182 exposed records.
339Verified incidents
44Countries
2022–2026Active range
0%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Qilin incidents (100 most recent of 339)
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2026 | Connections | Other | Vilvoorde, Belgium | — | Unknown | Source |
| August 2026 | Commission de la construction du Québec | Government | Quebec, Canada | — | Unknown | Source |
| August 2026 | Uşak Üniversitesi | Education | Usak, Turkey | — | Unknown | Source |
| August 2026 | Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) | Government | District of Columbia, United States | — | Unknown | Source |
| August 2026 | Brazosport College | Education | Texas, United States | — | Unknown | Source |
| August 2026 | Impact Centre Chrétien | Other | Croissy-Beaubourg, France | — | Unknown | Source |
| August 2026 | Depona AB | Service | Stockholm, Sweden | — | Unknown | Source |
| August 2026 | Filtronic | Manufacturing | Sedgefield, United Kingdom | — | Unknown | Source |
| August 2026 | WEBA | Retail | Gent, Belgium | — | No | Source |
| August 2026 | Berlin Brandenburgische Wohnungsbaugenossenschaft eG | Other | Berlin, Germany | — | Unknown | Source |
| August 2026 | Loescher Editore | Other | Turin, Italy | — | Unknown | Source |
| August 2026 | Stade Français | Other | Paris, France | — | Unknown | Source |
| July 2026 | Zanichelli Editore S.p.A. | Other | Bologna, Italy | — | Unknown | Source |
| July 2026 | INVENSITY GmbH | Service | Wiesbaden, Germany | — | No | Source |
| July 2026 | Newton County Schools | Education | Georgia, United States | — | Unknown | Source |
| July 2026 | Mera Metal S.A. | Manufacturing | Warsaw, Poland | — | Unknown | Source |
| July 2026 | Pennant Hills Golf Club | Other | Sydney, Australia | — | Unknown | Source |
| July 2026 | rehaVital Gesundheitsservice GmbH | Healthcare | Hamburg, Germany | — | Unknown | Source |
| July 2026 | Universitatea de Vest "Vasile Goldiș” din Arad | Education | Arad, Romania | — | Unknown | Source |
| July 2026 | Asset Flooring Group Australia | Service | Hallam, Australia | — | Unknown | Source |
| July 2026 | Groupe Fenwick | Manufacturing | Gennevilliers, France | — | Unknown | Source |
| July 2026 | Ville de Drancy | Government | Drancy, France | — | No | Source |
| June 2026 | Revista Semana | Other | Madrid, Spain | — | Unknown | Source |
| June 2026 | GSW Gemeinschaftsstadtwerke GmbH | Utilities | Kamen, Germany | — | Unknown | Source |
| June 2026 | Retelit S.p.A. | Utilities | Milan, Italy | — | Unknown | Source |
| June 2026 | Nacionalni park Plitvička jezera (Plitvice Lakes National Park) | Government | Plitvička Jezera, Croatia | — | Unknown | Source |
| June 2026 | Acosol S.A. | Government | Marbella, Spain | — | Unknown | Source |
| June 2026 | Musashino University | Education | Tokyo, Japan | — | No | Source |
| June 2026 | Bajaj Auto | Manufacturing | Pune, India | — | Unknown | Source |
| June 2026 | Misericórdia de Santo Tirso | Healthcare | Santo Tirso, Portugal | — | Unknown | Source |
| June 2026 | Central Bank of Libya | Government | Tripoli, Libya | — | Unknown | Source |
| May 2026 | Plaxen Adler Muncy, P.A. | Legal | Maryland, United States | — | Unknown | Source |
| May 2026 | Roth Industries GmbH & Co. KG | Manufacturing | Dautphetal, Germany | — | Unknown | Source |
| May 2026 | Australian College of Business Intelligence | Education | Sydney, Australia | — | Unknown | Source |
| May 2026 | Kennedy McLaughlin & Associates | Finance | Spring Hill, Australia | — | Unknown | Source |
| May 2026 | Mediapost | Service | Madrid, Spain | — | Unknown | Source |
| May 2026 | Ville d’Eyguières | Government | Eyguières, France | — | Unknown | Source |
| May 2026 | Bluize | Technology | Somerton, Australia | — | Unknown | Source |
| May 2026 | Menzies Group Pty Ltd | Service | Malvern, Australia | — | Unknown | Source |
| May 2026 | Schulte-Lindhorst GmbH & Co. | Transportation | Rietberg, Germany | — | Unknown | Source |
| May 2026 | Ville de Quiberon | Government | Quiberon, France | — | No | Source |
| April 2026 | See's Candies, Inc. | Food and Beverage | California, United States | 1,004 | Unknown | Source |
| April 2026 | Sysco Corporation | Food and Beverage | Texas, United States | — | Unknown | Source |
| April 2026 | City of Sandstone | Government | Minnesota, United States | — | Unknown | Source |
| April 2026 | Leone Film Group S.p.A. | Other | Rome, Italy | — | Unknown | Source |
| April 2026 | Generation Life | Finance | Melbourne, Australia | — | Unknown | Source |
| April 2026 | Tokyo Hoso Kogyo Corporation | Construction | Tokyo, Japan | — | Unknown | Source |
| April 2026 | Ahorramas, S.A. | Food and Beverage | Madrid, Spain | — | Unknown | Source |
| April 2026 | Cooperativa de Hospitales de Antioquia (COHAN) | Healthcare | Medellin, Colombia | — | Unknown | Source |
| April 2026 | Travel Expert (Asia) Enterprises Limited | Service | Hong Kong, Hong Kong | — | Unknown | Source |
| March 2026 | HumanEdge, Inc. | Service | New York, United States | 2,122 | Unknown | Source |
| March 2026 | Enviaseo E.S.P | Government | Envigado, Colombia | — | Unknown | Source |
| March 2026 | DENSO | Manufacturing | Kariya, Japan | — | Unknown | Source |
| March 2026 | Rusk County | Government | Wisconsin, United States | — | Unknown | Source |
| March 2026 | Heister Gruppe | Retail | Trier, Germany | — | Unknown | Source |
| March 2026 | City of Seal Beach and Seal Beach Police Department | Government | California, United States | — | Unknown | Source |
| March 2026 | Alamo Heights Independent School District | Education | Texas, United States | 26,629 | Unknown | Source |
| March 2026 | Netalia Srl | Technology | Genoa, Italy | — | Unknown | Source |
| March 2026 | Die Linke | Other | Berlin, Germany | — | Unknown | Source |
| March 2026 | Aroostook Mental Health Services, Inc. | Healthcare | Maine, United States | 501 | No | Source |
| March 2026 | LISI Group | Manufacturing | Grandvillars, France | — | Unknown | Source |
| March 2026 | Duffy’s Sports Grill | Food and Beverage | Florida, United States | — | Unknown | Source |
| March 2026 | Higashiyama Industries Co., Ltd. | Retail | Tokyo, Japan | — | Unknown | Source |
| March 2026 | Arbeiter-Samariter-Bund (ASB) | Other | Cologne, Germany | — | Unknown | Source |
| March 2026 | Suchthilfe direkt Essen gGmbH | Healthcare | Essen, Germany | — | Unknown | Source |
| February 2026 | Orange Madagascar | Utilities | Antananarivo, Madagascar | — | Unknown | Source |
| February 2026 | Tripod Farmers | Food and Beverage | Bacchus Marsh, Australia | — | Unknown | Source |
| February 2026 | RENAFAN GmbH | Healthcare | Tegel, Germany | — | Unknown | Source |
| February 2026 | Kroll International, LLC | Retail | Michigan, United States | — | Unknown | Source |
| February 2026 | Graneles de Chile S.A. | Transportation | O'Higgins, Chile | — | Unknown | Source |
| February 2026 | CONPET S.A. | Government | Ploiești, Romania | — | Unknown | Source |
| February 2026 | Anabuki Housing Service Co., Ltd. | Service | Takamatsu, Japan | 207,773 | Unknown | Source |
| January 2026 | Orthopaedic Specialists of Massachusetts | Healthcare | Massachusetts, United States | 20,200 | Unknown | Source |
| January 2026 | FMRS Health Systems, Inc. | Healthcare | West Virginia, United States | — | Unknown | Source |
| January 2026 | JC Resorts LLC | Other | California, United States | 5,942 | Unknown | Source |
| January 2026 | Transport Workers Union Local 100 | Other | New York, United States | 46,408 | Unknown | Source |
| January 2026 | Rocky Mountain Care | Healthcare | Utah, United States | — | Unknown | Source |
| January 2026 | Segue Manufacturing Services LLC | Manufacturing | Massachusetts, United States | 400 | Unknown | Source |
| January 2026 | O. Berk Company of New England LLC | Retail | New Jersey, United States | — | Unknown | Source |
| January 2026 | Sakata Seed America, Inc. | Retail | California, United States | — | Unknown | Source |
| January 2026 | Herren Caflisch Rutsch - Notariat & Verwaltungen | Legal | Bern, Switzerland | — | Unknown | Source |
| January 2026 | Kouei Co., Ltd. | Manufacturing | Tokyo, Japan | — | Unknown | Source |
| January 2026 | Tulsa International Airport | Government | Oklahoma, United States | — | Unknown | Source |
| January 2026 | Cooperativa de Hostelería de Navarra | Retail | Burlada, Spain | — | Unknown | Source |
| January 2026 | HARTE-BAVENDAMM Rechtsanwälte PartG mbB | Legal | Hamburg, Germany | — | Unknown | Source |
| January 2026 | Y.C.C. Parts MFG Co., Ltd. | Manufacturing | Lukang, Taiwan | — | Unknown | Source |
| December 2025 | Goodwin University | Education | Connecticut, United States | 56,156 | Unknown | Source |
| December 2025 | Eanes Independent School District | Education | Texas, United States | 9,506 | Unknown | Source |
| December 2025 | Earthbound Holding LLC | Retail | Texas, United States | 6,766 | Unknown | Source |
| December 2025 | France Terre d'Asile | Other | Paris, France | — | Unknown | Source |
| December 2025 | Bangchak Corporation Public Company Limited | Other | Bangkok, Thailand | — | Unknown | Source |
| December 2025 | Evergreen Printing Company | Service | New Jersey, United States | — | Unknown | Source |
| December 2025 | Haxx | Other | Madrid, Spain | — | No | Source |
| December 2025 | ATALIAN Global Services | Service | Vitry-sur-Seine, France | — | Unknown | Source |
| December 2025 | Dom Development S.A. | Construction | Warsaw, Poland | — | Unknown | Source |
| December 2025 | Logic Vein Co., Ltd. | Technology | Kawasaki, Japan | 97,338 | Unknown | Source |
| December 2025 | Eastern Townships School Board | Education | Magog, Canada | — | Unknown | Source |
| December 2025 | National Biscuit Industries Ltd SAOG | Food and Beverage | Muscat, Oman | — | Unknown | Source |
| December 2025 | Stadt Fürth | Government | Fürth, Germany | — | Unknown | Source |
| December 2025 | Istarska županija - Regione Istriana | Government | Pula, Croatia | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Qilin's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.