Country
Ransomware attacks in Brazil
Ransomware groups have listed 536 organisations from Brazil on their leak sites since February 2022; the latest post is from 9 September 2026. Most active groups: Lockbit3, Ransomhub and Thegentlemen. Most affected sector: Professional Services.
Total posts
536
First seen
2022-02-04
Latest post
2026-09-09
Groups
104
Most active groups
- Lockbit3 39
- Ransomhub 35
- Thegentlemen 31
- Lockbit5 28
- 8base 20
- Arcusmedia 20
- Akira 19
- Babuk2 15
- Incransom 13
- Nova 12
Most targeted sectors
- Professional Services 107
- Manufacturing 82
- Technology 69
- Healthcare 51
- Agriculture and Food Production 45
- Retail & E-Commerce 38
- Transportation 35
- Education 30
- Government & Defense 25
- Energy & Utilities 17