Country
Ransomware attacks in Bulgaria
Ransomware groups have listed 39 organisations from Bulgaria on their leak sites since August 2023; the latest post is from 19 July 2026. Most active groups: Ransomed, Coinbasecartel and Everest. Most affected sector: Retail & E-Commerce.
Total posts
39
First seen
2023-08-01
Latest post
2026-07-19
Groups
16
Most active groups
- Ransomed 19
- Coinbasecartel 2
- Everest 2
- Krybit 2
- Lockbit5 2
- Sarcoma 2
- Anubis 1
- Blackshrantac 1
- Crypto24 1
- Deadlock 1
Most targeted sectors
- Retail & E-Commerce 14
- Financial Services 5
- Manufacturing 3
- Professional Services 3
- Technology 3
- Energy & Utilities 2
- Government & Defense 2
- Healthcare 2
- Hospitality 1
- Transportation 1