Dominion Lending Centres Listed by qilin Ransomware Group

On April 21, 2025, mortgage brokerage Dominion Lending Centres appeared on the leak site of the qilin ransomware group in a listing claiming internal files were exfiltrated during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates that qilin listed Dominion Lending Centres and began publishing samples of stolen data. The exposed material consists of internal files taken during the incident. The number of people whose personal information was taken remains unknown. No confirmed timeline for the initial breach has been released beyond the April 21 listing date. The company, which assists Canadian home buyers with mortgage products, had customer and operational records among the data exfiltrated.

Why This Matters for You and Your Family

If you have ever applied for a mortgage, refinanced a home, or provided personal financial documents to Dominion Lending Centres, your information may now be in the hands of criminals. Mortgage files routinely contain full names, addresses, dates of birth, Social Insurance Numbers, income details, bank statements, and credit reports. Once this combination leaves a company’s control, it can be used for identity theft, loan fraud, tax fraud, or sold to others who target your finances. Your family members listed on joint applications are also exposed. Even if you were only a co-signer or a reference on someone else’s file, the data can still be leveraged against you.

The Doxxing and Identity-Chain Risks

Credential leaks like this one rarely stop at the initial breach. Attackers map email addresses, phone numbers, and passwords across dozens of other services. A password reused from your mortgage application can open email, banking, or government accounts. Children’s gaming accounts are especially vulnerable because they often share family email addresses or phone numbers and lack strong protections. Once one account falls, it creates a chain that leads to doxxing, harassment, or further extortion. Continuous monitoring across 13.1 billion+ breach records and 100-plus platforms becomes essential because these connections surface weeks or months after the original incident.

Qilin’s Publicly Known Track Record

Public reporting attributes the attack to the qilin ransomware group, which emerged in 2022. The group has targeted organizations across healthcare, education, manufacturing, and financial services. Its typical playbook involves gaining initial access through phishing or exploited remote desktop protocols, exfiltrating sensitive files before encrypting systems, then publishing samples on its leak site to pressure victims into payment. Qilin uses double-extortion tactics: it threatens both data encryption and public release of stolen documents. The group’s leak site continues to list new victims on a regular basis.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate the password you used at Dominion Lending Centres anywhere it is reused and enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring so the next breach that touches your family is caught in hours, not months.
• Cover the household — DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same address or email.
• Let remediation specialists handle takedown requests across data brokers and exposed records for you.

The incident shows how quickly mortgage data can fuel larger identity chains that affect every member of a household. Taking concrete steps now limits the damage and reduces the chance that this claimed breach becomes the first link in a longer campaign against you or your family. Start your DoxxScan trial and let its continuous monitoring across 13.1B+ breach records, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage—including children’s gaming accounts—work on your behalf.