iFink

This record is a provider-reported ransomware claim attributed to Qilin. It is an allegation and has not been independently confirmed.

Claim context

Group-published claim date: 2026-10-30T00:00:00.000Z
First tracked: 2026-10-30T12:00:00.000Z
Last observed: 2026-10-30T13:36:25.963Z
Monitoring providers: 3
Independent monitoring providers: 2
Post URL: https://recentbreaches.com/breach/ifink-qilin-2026-10
Data source: unified
Duplicate records merged: 2

Provider observation timeline

Newest observations first. Provider observations are not independent confirmation of an incident.

Monitoring provider: observed 2026-10-30T13:36:25.963Z; source-published 2026-10-30T13:36:25.963Z; retrieved 2026-10-30T13:46:54.285Z.
Monitoring provider: observed 2026-10-30T13:03:39.731Z; source-published 2026-10-30T00:00:00.000Z; retrieved 2026-10-31T00:13:32.589Z.
Monitoring provider: observed 2026-10-30T12:00:00.000Z; source-published 2026-10-30T12:00:00.000Z; retrieved 2026-10-30T16:07:47.566Z.

Provider records

Every stored provider record behind this claim, newest first.

Provider credit
RansomLook
Provider URL
https://www.ransomlook.io/
Feed id
ransomlook
Provider record id
derived-sha256:11739c86d753c62705131761752f95cfb6e9a8a6e8744c521c8f689cc245ce73
MISP event UUID
46a41b62-4e33-54c7-95f8-d6137655702f
Observed
2026-10-30T13:36:25.963Z
Source-published
2026-10-30T13:36:25.963Z
Retrieved
2026-10-30T13:46:54.285Z
Format
json-array
Transport
https-rest
Overlap class
primary
Independent corroboration
yes
Provider credit
CTI.FYI
Provider URL
https://cti.fyi/
Feed id
cti-fyi
Provider record id
derived-sha256:e7acb827e25a21f06b23a47e3df76fa5ef606d3f6ad2bef0397a4d64b2d809dd
Observed
2026-10-30T13:03:39.731Z
Source-published
2026-10-30T00:00:00.000Z
Retrieved
2026-10-31T00:13:32.589Z
Format
paginated-rest
Transport
https-rest
Overlap class
primary
Independent corroboration
yes
Provider credit
RecentBreaches
Provider URL
https://recentbreaches.com/breach/ifink-qilin-2026-10
Feed id
recentbreaches
Provider record id
derived-sha256:7f181edef3f6ba93a11206159dbcbc22b55024e9bf7fa5014983eae98f833135
Observed
2026-10-30T12:00:00.000Z
Source-published
2026-10-30T12:00:00.000Z
Retrieved
2026-10-30T16:07:47.566Z
Format
rss
Transport
https-rss
Overlap class
mirror
Independent corroboration
no

Tracker record history

Newest entries first. These dates describe tracker records, not attack dates.

Initial tracker record: recorded 2026-11-02T09:26:00.933Z; associated provider observation 2026-10-30T12:00:00.000Z.