A prolific cyber extortionist group lists Kinetic Education as a data breach victim on the darknet.
The Qilin ransomware-as-a-service operation has listed a Victoria-headquartered online tutoring company as a victim on its darknet leak site.
The hackers listed Kinetic Education in an 8 June leak post, but aside from the post itself, Qilin – or its affiliate – has provided scant details of the cyber attack.
You’re out of free articles for this month
To continue reading the rest of this article, please log in.
The leak post does not include the volume of data involved, nor any details of the data potentially compromised. All that’s included is Kinetic Education’s company logo, the date of the leak post, and the number of views it has clocked up.
If the ticker is to be believed, the page has been viewed more than 11,000 times.
Kinetic Education has not responded to Cyber Daily’s request for comment.
Who is Qilin?
Qilin has claimed 1,929 victims since it was first observed in 2022, spread across 99 countries. It is currently the most active ransomware operation in existence, averaging about 100 victim listings each month in 2026 so far.
The group operates under a ransomware-as-a-service model, with affiliates gaining access to its ransomware infrastructure in return for a cut of any ransom payments.
While some affiliates will publish complete details of their activities, including the volume of data stolen and screenshots of evidence, others post minimal information, often not going into any detail regarding the data and its contents.
Qilin’s most recent Australian victim was Queensland-based The Banyans Medical Centre and Specialist Clinics, which was listed by the hackers earlier this month.
Who is Kinetic Education?
Kinetic Education is based in Frankston, Victoria, and provides online tutoring in maths and English to students from kindergarten through to Year 12.
“Founded in the 1990s, it has supported more than 100,000 Australian families over 30+ years, making it one of Australia’s longest-running tutoring providers,” the company said on its website.
Want to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.
David Hollingworth
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.