Qilin Holds 16% Market Share in Ransomware Consolidation (infosecurity-magazine.com)

• Qilin holds ~16% of ransomware market share (Check Point).
• Sophos data: 1,496 victims listed in 12 months on leak site.
• The Gentlemen surpassed Qilin in June 2026 (115 vs 78 victims).
• Qilin exploited Check Point VPN vulnerability in June 2026.

"Qilin has become the dominant ransomware-as-a-service operation, holding approximately 16% of the cybercriminal market share according to Check Point's 2026 Cyber Security Report. The group listed 1,496 victims on its leak site over the past 12 months, surpassing rivals Akira (1,205) and The Gentlemen (763). Qilin's rise follows law enforcement disruptions of major groups like LockBit and RansomHub, attracting experienced affiliates through high payouts and mature infrastructure. However, The Gentlemen briefly overtook Qilin in June 2026 with 115 victims. Researchers expect law enforcement action against Qilin due to its growing prominence."