[QILIN] – Ransomware Victim: Francehopital
![[QILIN] - Ransomware Victim: Francehopital 1 image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png)
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an editorial notice informing that a company has fallen victim to a ransomware attack. RedPacket Security is not affiliated with any ransomware threat actors or groups and will not host infringing content. The information on this page is automated and redacted whilst being scraped directly from the QILIN Onion Dark Web Tor Blog page.
AI Generated Summary of the Ransomware Leak Page
On November 5, 2025, 21:24:45.050372, a ransomware leak post references Francehopital, a French healthcare provider. The victim_name identified in the record is Francehopital, the industry is Healthcare, and the country is France (FR). Because no explicit compromise date is provided, the post date is used as the reference point. The leak page notes that a claim URL is present and exhibits three images as evidence; these images are hosted on Tor onion services, with the URLs defanged in this report. The body excerpt repeats the victim’s name and includes a TOX identifier: TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68.
The page includes three images, which are likely screenshots or internal documents used to substantiate the claim. The evidence is delivered via onion-hosted links, but the URLs are defanged here to prevent direct access. The presence of a claim URL suggests the attackers are presenting a data-related claim on the leak page, yet the available metadata does not specify any ransom amount. No additional non-public identifiers or compromised data types are described in the provided excerpt beyond the repeated victim name and the TOX tag. The incident is positioned within the healthcare sector in France, with Francehopital as the named victim.
Support Our Work
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.
