Country
Ransomware attacks in Costa Rica
Ransomware groups have listed 22 organisations from Costa Rica on their leak sites since February 2022; the latest post is from 15 October 2026. Most active groups: Lockbit3, Dragonforce and Incransom. Most affected sector: Professional Services.
Total posts
22
First seen
2022-02-25
Latest post
2026-10-15
Groups
16
Most active groups
- Lockbit3 3
- Dragonforce 2
- Incransom 2
- Lynx 2
- Ransomhub 2
- Arcusmedia 1
- Darkvault 1
- Funksec 1
- Hive 1
- Medusalocker 1
Most targeted sectors
- Professional Services 4
- Transportation 4
- Agriculture and Food Production 3
- Technology 3
- Energy & Utilities 2
- Financial Services 2
- Healthcare 2
- Education 1
- Hospitality 1
Ransomware victims in Costa Rica per year
All 22 victims
Search every post in the full table.| Victim | Group | Sector | Discovered |
|---|---|---|---|
| www.coopecaja.fi.cr | Incransom | Financial Services | |
| Asada Sarapiqu | Arcusmedia | Agriculture and Food Production | |
| Recsa | Qilin | Professional Services | |
| Clínica La Sabana | Payload | Healthcare | |
| Colegio María Inmaculada (CMI) | Medusalocker | Education | |
| latamlex (gyg.local) | Incransom | Professional Services | |
| Grupo Serex | Dragonforce | Transportation | |
| Laboratorio Clinico Santa Rita | Thegentlemen | Healthcare | |
| Grupo DIRIA | Dragonforce | Hospitality | |
| enersolcr.com | Stormous | Energy & Utilities | |
| Sisnet, Costa Rica | Nightspire | Technology | |
| www.confabca.com | Ransomhub | Professional Services | |
| recope.go.cr | Ransomhub | Energy & Utilities | |
| ctsjo.com | Funksec | Transportation | |
| Grupo Trisan | Lynx | Agriculture and Food Production | |
| Grupo_Trisan | Lynx | Agriculture and Food Production | |
| cosimti.com | Darkvault | Technology | |
| sislocar.com | Lockbit3 | Transportation | |
| Banco Promerica | Snatch | Financial Services | |
| zurcherodioraven.com | Lockbit3 | Professional Services | |
| jetboxcargo.com | Lockbit3 | Transportation | |
| ITS InfoCom | Hive | Technology |