qilin
Known ransomware group ACTIVEAlso known as: Agenda
Active · high-tempo
Qilin (also tracked as Agenda) is a ransomware-as-a-service operation active since 2022, written in Rust and Go for cross-platform encryption of Windows, Linux, and VMware ESXi systems. It runs a double-extortion model, leaking stolen data on its dark-web site when victims refuse to pay, and rose to prominence after high-impact attacks on healthcare and critical-services targets.
83
Total Claims
72
Critical
—
Records Claimed
14
Industries Hit
Active span: Apr 10, 2026 – Jun 8, 2026 · 83 organizations targeted
Active · high-tempo
Actor Threat Profile
Activity Timeline
Peak: Apr 2026 (51)Apr 2026
LessMore
Jun 2026Share this profile
Top Targeted Industries
Healthcare 14
Manufacturing 11
Business Services 9
Financial Services 8
Agriculture and Food Production 5
Consumer Services 5
Tradecraft & Infrastructure
25
Documented tools
14 / 55
MITRE tactics / techniques
4
Known leak sites
CredentialTheftDefenseEvasionDiscoveryEnumExfiltrationLOLBASNetworkingOffsecRMM-Tools
Full intelligence profile on ransomware.live →
Targeted Organizations
The Banyans Health and WellnessKinetic EducationOpera ComiqueCentral Florida Cosmetic & Family DentistryNova Medical ProductsTricanMEISA - SinesClinica MaitenesDillon Family MedicineProvidence Medical GroupMindpath College HealthExpoCreditSalter HealthCareMajlis Perbandaran Alor GajahCLINICA AVELLANEDA MEDICAL CENTERPNSB Insurance Brokers Sdn BhdB.Care Medical CenterAustralian College of Business IntelligenceBrand X Hydrovac ServicesSpirit Medical TransportDomaine Des TournelsLindaburyFogel Capital ManagementLaclinic-MontreuxPanal Seguros S.A.Le Maire de QUIBERONNorcal Training CenterLSM LeeNorth Star SignsStandard-ExaminerStar PrecisionArmstrong George Cohen Will OphthalmologyApothebeautyJayeff ConstructionMES Hybrid Document SystemsSee's CandiesThe Switch EnterprisesZinkan & Barker DevelopmentLeone Film Group SpALifeline PCSA & A Building MaterialExclusive NetworksInspiraLongwood Engineering CompanyMuller TechnologyBuckley PowderCahbo ProdukterChelten HouseFirst County FCUKEMBA Indianapolis Credit UnionLeistritz Turbine TechnologySanCorTravel ExpertWoodfields ConsultantsDensoFlipo GroupGrupo ABCMarc CainPoint Four EPoS SolutionsPriests for LifeProgressive PropaneB to B VisionsCity of Napoleon, OhioClearview IntelligenceManulife WealthThe FAFSAvitransFerguson TimarHeartland Steel ProductsIndustrial Carrocera ArbucienseKolin TurkeyPTS Office SystemsSafety Engineering LaboratoriesSea Air International ForwardersSTERIMEDHS Technology GroupClearwater Marine AquariumGruppo ICM SPALimkonA RoettgersChalmers & KubeckHoflandSAAM Towage
Claims by qilin
Critical
Ransomware Claim: The Banyans Health and Wellness
The Banyans Health and Wellness
qilin
Ransomware Healthcare
Jun 9, 2026 Low
Ransomware Claim: Kinetic Education
Kinetic Education
qilin
Ransomware Education
Jun 9, 2026 Low
Ransomware Claim: Opera Comique
Opera Comique
qilin
Ransomware Hospitality and Tourism
Jun 9, 2026 Critical
Ransomware Claim: Central Florida Cosmetic & Family Dentistry
Central Florida Cosmetic & Family Dentistry
qilin
Ransomware Healthcare
Jun 6, 2026 Critical
Ransomware Claim: Nova Medical Products
Nova Medical Products
qilin
Ransomware Healthcare
Jun 5, 2026 Critical
Ransomware Claim: Trican
Trican
qilin
Ransomware Energy
Jun 5, 2026 Critical
Ransomware Claim: MEISA - Sines
MEISA - Sines
qilin
Ransomware Energy
Jun 3, 2026 Critical
Ransomware Claim: Clinica Maitenes
Clinica Maitenes
qilin
Ransomware Healthcare
Jun 2, 2026 Critical
Ransomware Claim: Dillon Family Medicine
Dillon Family Medicine
qilin
Ransomware Healthcare
Jun 1, 2026 Critical
Ransomware Claim: Providence Medical Group
Providence Medical Group
qilin
Ransomware Healthcare
Jun 1, 2026 Critical
Ransomware Claim: Mindpath College Health
Mindpath College Health
qilin
Ransomware Healthcare
May 29, 2026 Critical
Ransomware Claim: ExpoCredit
ExpoCredit
qilin
Ransomware Financial Services
May 25, 2026 Critical
Ransomware Claim: Salter HealthCare
Salter HealthCare
qilin
Ransomware Healthcare
May 18, 2026 Low
Ransomware Claim: Majlis Perbandaran Alor Gajah
Majlis Perbandaran Alor Gajah
qilin
Ransomware Public Sector
May 18, 2026 Critical
Ransomware Claim: CLINICA AVELLANEDA MEDICAL CENTER
CLINICA AVELLANEDA MEDICAL CENTER
qilin
Ransomware Healthcare
May 17, 2026 Critical
Ransomware Claim: PNSB Insurance Brokers Sdn Bhd
PNSB Insurance Brokers Sdn Bhd
qilin
Ransomware Financial Services
May 17, 2026 Critical
Ransomware Claim: B.Care Medical Center
B.Care Medical Center
qilin
Ransomware Healthcare
May 16, 2026 Low
Ransomware Claim: Australian College of Business Intelligence
Australian College of Business Intelligence
qilin
Ransomware Education
May 16, 2026 Critical
Ransomware Claim: Brand X Hydrovac Services
Brand X Hydrovac Services
qilin
Ransomware Energy
May 14, 2026 Critical
Ransomware Claim: Spirit Medical Transport
Spirit Medical Transport
qilin
Ransomware Healthcare
May 14, 2026 Low
Ransomware Claim: Domaine Des Tournels
Domaine Des Tournels
qilin
Ransomware Agriculture and Food Production
May 14, 2026 Critical
Ransomware Claim: Lindabury
Lindabury
qilin
Ransomware Financial Services
May 10, 2026 Critical
Ransomware Claim: Fogel Capital Management
Fogel Capital Management
qilin
Ransomware Financial Services
May 9, 2026 Critical
Ransomware Claim: Laclinic-Montreux
Laclinic-Montreux
qilin
Ransomware Healthcare
May 8, 2026 Critical
Ransomware Claim: Panal Seguros S.A.
Panal Seguros S.A.
qilin
Ransomware Financial Services
May 8, 2026 Low
Ransomware Claim: Le Maire de QUIBERON
Le Maire de QUIBERON
qilin
Ransomware Public Sector
May 8, 2026 Low
Ransomware Claim: Norcal Training Center
Norcal Training Center
qilin
Ransomware Education
May 8, 2026 Low
Ransomware Claim: LSM Lee
LSM Lee
qilin
Ransomware Manufacturing
May 4, 2026 Low
Ransomware Claim: North Star Signs
North Star Signs
qilin
Ransomware Consumer Services
May 4, 2026 Low
Ransomware Claim: Standard-Examiner
Standard-Examiner
qilin
Ransomware Public Sector
May 4, 2026 Low
Ransomware Claim: Star Precision
Star Precision
qilin
Ransomware Manufacturing
May 4, 2026 Critical
Ransomware Claim: Armstrong George Cohen Will Ophthalmology
Armstrong George Cohen Will Ophthalmology
qilin
Ransomware Healthcare
May 3, 2026 Critical
Ransomware Claim: Apothebeauty
Apothebeauty
qilin
Ransomware Consumer Services
May 1, 2026 Critical
Ransomware Claim: Jayeff Construction
Jayeff Construction
qilin
Ransomware Construction
May 1, 2026 Critical
Ransomware Claim: MES Hybrid Document Systems
MES Hybrid Document Systems
qilin
Ransomware Business Services
May 1, 2026 Critical
Ransomware Claim: See's Candies
See's Candies
qilin
Ransomware Agriculture and Food Production
May 1, 2026 Critical
Ransomware Claim: The Switch Enterprises
The Switch Enterprises
qilin
Ransomware Business Services
May 1, 2026 Critical
Ransomware Claim: Zinkan & Barker Development
Zinkan & Barker Development
qilin
Ransomware Construction
May 1, 2026 Critical
Ransomware Claim: Leone Film Group SpA
Leone Film Group SpA
qilin
Ransomware Consumer Services
Apr 28, 2026 Critical
Ransomware Claim: Lifeline PCS
Lifeline PCS
qilin
Ransomware Telecommunication
Apr 28, 2026 Critical
Ransomware Claim: A & A Building Material
A & A Building Material
qilin
Ransomware Construction
Apr 27, 2026 Critical
Ransomware Claim: Exclusive Networks
Exclusive Networks
qilin
Ransomware Technology
Apr 27, 2026 Critical
Ransomware Claim: Inspira
Inspira
qilin
Ransomware
Apr 27, 2026 Critical
Ransomware Claim: Longwood Engineering Company
Longwood Engineering Company
qilin
Ransomware Manufacturing
Apr 27, 2026 Critical
Ransomware Claim: Muller Technology
Muller Technology
qilin
Ransomware Technology
Apr 27, 2026 Critical
Ransomware Claim: Buckley Powder
Buckley Powder
qilin
Ransomware Manufacturing
Apr 26, 2026 Critical
Ransomware Claim: Cahbo Produkter
Cahbo Produkter
qilin
Ransomware Agriculture and Food Production
Apr 26, 2026 Critical
Ransomware Claim: Chelten House
Chelten House
qilin
Ransomware
Apr 26, 2026 Critical
Ransomware Claim: First County FCU
First County FCU
qilin
Ransomware Financial Services
Apr 26, 2026 Critical
Ransomware Claim: KEMBA Indianapolis Credit Union
KEMBA Indianapolis Credit Union
qilin
Ransomware Financial Services
Apr 26, 2026 Critical
Ransomware Claim: Leistritz Turbine Technology
Leistritz Turbine Technology
qilin
Ransomware Manufacturing
Apr 26, 2026 Critical
Ransomware Claim: SanCor
SanCor
qilin
Ransomware Agriculture and Food Production
Apr 26, 2026 Critical
Ransomware Claim: Travel Expert
Travel Expert
qilin
Ransomware Hospitality and Tourism
Apr 26, 2026 Critical
Ransomware Claim: Woodfields Consultants
Woodfields Consultants
qilin
Ransomware Business Services
Apr 26, 2026 Critical
Ransomware Claim: Denso
Denso
qilin
Ransomware Manufacturing
Apr 25, 2026 Critical
Ransomware Claim: Flipo Group
Flipo Group
qilin
Ransomware Manufacturing
Apr 25, 2026 Critical
Ransomware Claim: Grupo ABC
Grupo ABC
qilin
Ransomware
Apr 25, 2026 Critical
Ransomware Claim: Marc Cain
Marc Cain
qilin
Ransomware Consumer Services
Apr 25, 2026 Critical
Ransomware Claim: Point Four EPoS Solutions
Point Four EPoS Solutions
qilin
Ransomware Business Services
Apr 25, 2026 Critical
Ransomware Claim: Priests for Life
Priests for Life
qilin
Ransomware
Apr 25, 2026 Critical
Ransomware Claim: Progressive Propane
Progressive Propane
qilin
Ransomware Energy
Apr 25, 2026 Critical
Ransomware Claim: B to B Visions
B to B Visions
qilin
Ransomware Business Services
Apr 24, 2026 Critical
Ransomware Claim: City of Napoleon, Ohio
City of Napoleon, Ohio
qilin
Ransomware Public Sector
Apr 24, 2026 Critical
Ransomware Claim: Clearview Intelligence
Clearview Intelligence
qilin
Ransomware Business Services
Apr 24, 2026 Critical
Ransomware Claim: Manulife Wealth
Manulife Wealth
qilin
Ransomware Financial Services
Apr 24, 2026 Critical
Ransomware Claim: The FAFS
The FAFS
qilin
Ransomware Agriculture and Food Production
Apr 24, 2026 Critical
Ransomware Claim: Avitrans
Avitrans
qilin
Ransomware Transportation/Logistics
Apr 22, 2026 Critical
Ransomware Claim: Ferguson Timar
Ferguson Timar
qilin
Ransomware Construction
Apr 22, 2026 Critical
Ransomware Claim: Heartland Steel Products
Heartland Steel Products
qilin
Ransomware Manufacturing
Apr 22, 2026 Critical
Ransomware Claim: Industrial Carrocera Arbuciense
Industrial Carrocera Arbuciense
qilin
Ransomware Manufacturing
Apr 22, 2026 Critical
Ransomware Claim: Kolin Turkey
Kolin Turkey
qilin
Ransomware Manufacturing
Apr 22, 2026 Critical
Ransomware Claim: PTS Office Systems
PTS Office Systems
qilin
Ransomware Business Services
Apr 22, 2026 Critical
Ransomware Claim: Safety Engineering Laboratories
Safety Engineering Laboratories
qilin
Ransomware Manufacturing
Apr 22, 2026 Critical
Ransomware Claim: Sea Air International Forwarders
Sea Air International Forwarders
qilin
Ransomware Transportation/Logistics
Apr 22, 2026 Critical
Ransomware Claim: STERIMED
STERIMED
qilin
Ransomware Healthcare
Apr 22, 2026 Critical
Ransomware Claim: HS Technology Group
HS Technology Group
qilin
Ransomware Technology
Apr 19, 2026 Critical
Ransomware Claim: Clearwater Marine Aquarium
Clearwater Marine Aquarium
qilin
Ransomware Consumer Services
Apr 16, 2026 Critical
Ransomware Claim: Gruppo ICM SPA
Gruppo ICM SPA
qilin
Ransomware
Apr 16, 2026 Critical
Ransomware Claim: Limkon
Limkon
qilin
Ransomware
Apr 16, 2026 Critical
Ransomware Claim: A Roettgers
A Roettgers
qilin
Ransomware Business Services
Apr 11, 2026 Critical
Ransomware Claim: Chalmers & Kubeck
Chalmers & Kubeck
qilin
Ransomware Business Services
Apr 11, 2026 Critical
Ransomware Claim: Hofland
Hofland
qilin
Ransomware
Apr 11, 2026 Critical
Ransomware Claim: SAAM Towage
SAAM Towage
qilin
Ransomware Transportation/Logistics
Apr 11, 2026