Country
Ransomware attacks in Bulgaria
Ransomware groups have listed 46 organisations from Bulgaria on their leak sites since August 2023; the latest post is from 25 October 2026. Most active groups: Ransomed, Coinbasecartel and Everest. Most affected sector: Retail & E-Commerce.
Total posts
46
First seen
2023-08-01
Latest post
2026-10-25
Groups
21
Most active groups
- Ransomed 19
- Coinbasecartel 2
- Everest 2
- Krybit 2
- Lockbit5 2
- N0n 2
- Sarcoma 2
- Thegentlemen 2
- Anubis 1
- Blackshrantac 1
Most targeted sectors
- Retail & E-Commerce 14
- Financial Services 5
- Manufacturing 5
- Energy & Utilities 3
- Healthcare 3
- Professional Services 3
- Technology 3
- Government & Defense 2
- Hospitality 1
- Transportation 1