// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › Qilin
Threat Group Dossier

Qilin

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
Qilin — 16 attributed incidents across our corpus.
Incidents on file16
First seen2024-06-03
Last seen2026-05-24
Top sectorautomotive

Techniques observed (MITRE ATT&CK)

T1486 Data Encrypted for Impact (16)

Sectors targeted

automotive (2)grocery retail (1)Healthcare (1)IT Services (MSP) (1)Real Estate (1)insurance (1)financial services (1)aviation (1)manufacturing (1)healthcare (1)

Attributed breaches

2026-05-24
ransomware
P & G Trading
2026-05-18
ransomware
Covenant Health
2026-05-03
ransomware
Microsoft
2025-11-26
ransomware
South Korean MSP (unnamed)
2025-11-22
ransomware
Interlink
2025-11-17
ransomware
KDR Real Estate Services
2025-08-22
ransomware
Nissan Creative Box
2025-07-31
ransomware
Carbon Black
2025-06-13
ransomware
Asefa
2025-06-06
ransomware
Regents Capital Corporation
2025-05-31
ransomware
Chalmers Suspensions International
2025-05-26
ransomware
Elit Avia
2025-05-20
ransomware
SAP
2025-03-17
ransomware
SMC Corporation
2024-07-16
ransomware
Symantec
2024-06-03
ransomware
Synnovis

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →