Country
Ransomware attacks in China
Ransomware groups have listed 141 organisations from China on their leak sites since March 2022; the latest post is from 1 September 2026. Most active groups: Lockbit3, Ransomhouse and Dragonforce. Most affected sector: Technology.
Total posts
141
First seen
2022-03-11
Latest post
2026-09-01
Groups
60
Most active groups
- Lockbit3 12
- Ransomhouse 10
- Dragonforce 8
- Babuk2 7
- Thegentlemen 7
- Qilin 6
- Alphv 5
- Devman 5
- Lockbit5 5
- Clop 4
Most targeted sectors
- Technology 43
- Manufacturing 33
- Professional Services 10
- Energy & Utilities 8
- Healthcare 8
- Retail & E-Commerce 7
- Financial Services 6
- Transportation 5
- Agriculture and Food Production 4
- Government & Defense 4
Ransomware victims in China per year
Latest 100 victims
Search every post in the full table.| Victim | Group | Sector | Discovered |
|---|---|---|---|
| reignwoodpark.com | Krybit | Hospitality | |
| esopartnerscpa | ZaWoo | Professional Services | |
| Hangzhou Qihan Biotech Co., Ltd. | Global | Healthcare | |
| Atcomm | Global | Technology | |
| copcp.com | Chaos | — | |
| RXPE Group | Coinbasecartel | Manufacturing | |
| HONGHE-TECH.COM | Clop | Technology | |
| MINDRAY.COM | Clop | Healthcare | |
| laticrete.com.cn | L Group | Manufacturing | |
| RS Automation Co., Ltd. | Barracuda | Manufacturing | |
| Baicizhan | Dragonforce | Technology | |
| TUI China | Dragonforce | Hospitality | |
| JD Young | Termite | — | |
| Uniview Technologies | Global Secret Group | Technology | |
| v-silicon.com | Incransom | Technology | |
| Road Ahead Technologies Consultant | Dragonforce | Professional Services | |
| Atcom | Dragonforce | Technology | |
| momenta.cn | Dragonforce | Technology | |
| txdkj.com | Blackwater | — | |
| AMHWA Biopharm Co., Ltd. | CRPxO | Healthcare | |
| xuerong.com | Krybit | Technology | |
| drwu.com | Lockbit5 | — | |
| ECOVACS | Spacebears | Retail & E-Commerce | |
| CH Paper | Deadlock | Manufacturing | |
| uni-china.com | Lockbit5 | Professional Services | |
| huashan.com.cn | Krybit | Other | |
| Shenzhen Gongjin Electronics | Blackwater | Manufacturing | |
| Tuopu | Blackwater | Manufacturing | |
| Suzhou Yike Kejian | Thegentlemen | Manufacturing | |
| Uniview Technologies | Thegentlemen | Technology | |
| Jiangsu Zenergy Battery Technologies Group Co., Ltd. | Ransomhouse | Manufacturing | |
| Hangzhou Industrial | Thegentlemen | Manufacturing | |
| Paid Victim D3C1388C1B73BCA2 | AuditTeam | — | |
| Burning Rock Biotech | Thegentlemen | Healthcare | |
| sutex.com | Dragonforce | Agriculture and Food Production | |
| Xiamen Tungsten Co. (XTC) | Beast | Manufacturing | |
| hikvision.com | ALP-001 | Technology | |
| Novogene | Coinbasecartel | Technology | |
| Transsion | AiLock | Technology | |
| Camelot Electronics Technology Co., Ltd. | Beast | Technology | |
| yaomazi.com | Lockbit5 | Agriculture and Food Production | |
| SAIC Motor Corporation | Beast | Manufacturing | |
| Biaodianyun Group Ltd | Cipherforce | Technology | |
| czkingdee.com | Lockbit5 | Technology | |
| Micaforce Technology | Anubis | Technology | |
| HTHELI.COM | Clop | Hospitality | |
| Thin Red Line | Thegentlemen | Technology | |
| Jingchang Enterprise Co., Ltd | Qilin | Manufacturing | |
| JST Power Equipment | Akira | Manufacturing | |
| Hilong Petroleum Pipe Company LLC | Nightspire | Energy & Utilities | |
| USTAR | Thegentlemen | Retail & E-Commerce | |
| Dongguan HYX Industrial | Thegentlemen | Manufacturing | |
| Luxshare Precision Industry Co. Ltd. | Ransomhouse | Technology | |
| *n**e-ai | Devman | Technology | |
| Ada Technologies | Akira | Technology | |
| aqhch.com.cn | Lockbit5 | Manufacturing | |
| Hongji Metal | Sinobi | Manufacturing | |
| Kingcan Holdings Limited , Fuzhen Group | Radar | Manufacturing | |
| SANHUA INTERNATIONAL | Sinobi | Manufacturing | |
| TRAUM Investment Co. | Qilin | Financial Services | |
| Trustar Capital Management Co | Qilin | Financial Services | |
| PTR | Play | Energy & Utilities | |
| Broad High Asset Management | Qilin | Financial Services | |
| Concord New Energy Group | Dragonforce | Energy & Utilities | |
| www.shimaogroup.com | Devman | Manufacturing | |
| Risen Energy Co. | Worldleaks | Energy & Utilities | |
| PHARMARON.COM | Clop | Healthcare | |
| China Harbour Engineering Company | Devman | Transportation | |
| YHD Group | Handala | Transportation | |
| www.shautoparts.com | Qilin | Manufacturing | |
| laticrete.com.cn | J | Manufacturing | |
| Chinese Healthcare Organisation | Devman | Healthcare | |
| China Harbour Engeneiring Company | Devman | Transportation | |
| Enflame Technology | Killsec | Technology | |
| aqhch.com.cn | Lockbit3 | Manufacturing | |
| CVTE | Hellcat | Technology | |
| Doumen | Qilin | Professional Services | |
| Transsion Holdings | Hellcat | Technology | |
| Yadea Group Holdings Ltd | Dragonforce | Manufacturing | |
| mohrss.gov.cn ( Ministry of Human Resources and Social Security ) | Babuk2 | Government & Defense | |
| Intelligence Bureau of the Joint Staff Department of the Central Military Commission... | Babuk2 | Government & Defense | |
| taobao.com | Babuk2 | Technology | |
| This entry has been removed following a request from the company | Babuk2 | Technology | |
| JD.com Inc (Chinese) | Babuk2 | Technology | |
| CNS | Trinity | Healthcare | |
| Intelligence Bureau of the Joint Staff Department of the Central Military Commission China | Babuk2 | Government & Defense | |
| CNQC | Akira | Other | |
| bank.pingan.com (CN) | Babuk2 | Financial Services | |
| Engineering Mechanics | Lynx | Manufacturing | |
| Nationz Technologies Inc. | Ransomhouse | Technology | |
| Aishu, Eshoo | Ransomhouse | Technology | |
| yoniot.cn | Darkvault | Technology | |
| www.beikelogistics.com | Dragonransomware | Transportation | |
| oakenglish.com | Dragonransomware | Education | |
| INFiLED | Ransomhouse | Technology | |
| GuangDong South Land pharmaceutical | Ransomhouse | Healthcare | |
| [i2p-torrent]Jangho Group | Ransomhouse | Professional Services | |
| pingan.com | Killsec | Financial Services | |
| Chernan Technology | Orca | Technology | |
| miit.gov.cn | Killsec | Government & Defense |