AOQIN
Data as of November 4, 2026.
What industries AOQIN targets
Sector identified for 3 of 4 victims.
| Legal | 1 | |
| Energy | 1 | |
| Manufacturing | 1 |
Where the victims are located
Country identified for 2 of 4 victims.
| Egypt | 1 | |
| Slovenia | 1 |
Every AOQIN victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Goldsmith & Hull goldsmithcalaw.com | Legal | Not identified | Nov 4, 2026 |
| NX Electronics nxelectronics.com | Not identified | Not identified | Nov 4, 2026 |
| Petroshahd petroshahd.com | Energy | Egypt | Nov 4, 2026 |
| SILIKO siliko.si | Manufacturing | Slovenia | Nov 4, 2026 |
Browse recent data breaches for more.
AOQIN leak site
The address we've seen AOQIN publish victims from. Any .onion address needs the Tor Browser.
aoqinwwrizxbrwm3qb6l4jzgujgmcetp4jaug7fqylbf3xcwqwzvbuid.onion
AOQIN questions
Is AOQIN still active?
Yes. AOQIN posted its most recent victim on November 4, 2026. That's 4 victims in the last 30 days.
How many victims has AOQIN claimed?
AOQIN has named 4 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did AOQIN first appear?
The first victim we recorded for AOQIN was posted on November 4, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Has AOQIN already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.