Country
Ransomware attacks in Costa Rica
Ransomware groups have listed 20 organisations from Costa Rica on their leak sites since February 2022; the latest post is from 22 July 2026. Most active groups: Lockbit3, Dragonforce and Lynx. Most affected sector: Professional Services.
Total posts
20
First seen
2022-02-25
Latest post
2026-07-22
Groups
15
Most active groups
- Lockbit3 3
- Dragonforce 2
- Lynx 2
- Ransomhub 2
- Darkvault 1
- Funksec 1
- Hive 1
- Incransom 1
- Medusalocker 1
- Nightspire 1
Most targeted sectors
- Professional Services 4
- Transportation 4
- Technology 3
- Agriculture and Food Production 2
- Energy & Utilities 2
- Healthcare 2
- Education 1
- Financial Services 1
- Hospitality 1
Ransomware victims in Costa Rica per year
All 20 victims
Search every post in the full table.| Victim | Group | Sector | Discovered |
|---|---|---|---|
| Recsa | Qilin | Professional Services | |
| Clínica La Sabana | Payload | Healthcare | |
| Colegio María Inmaculada (CMI) | Medusalocker | Education | |
| latamlex (gyg.local) | Incransom | Professional Services | |
| Grupo Serex | Dragonforce | Transportation | |
| Laboratorio Clinico Santa Rita | Thegentlemen | Healthcare | |
| Grupo DIRIA | Dragonforce | Hospitality | |
| enersolcr.com | Stormous | Energy & Utilities | |
| Sisnet, Costa Rica | Nightspire | Technology | |
| www.confabca.com | Ransomhub | Professional Services | |
| recope.go.cr | Ransomhub | Energy & Utilities | |
| ctsjo.com | Funksec | Transportation | |
| Grupo Trisan | Lynx | Agriculture and Food Production | |
| Grupo_Trisan | Lynx | Agriculture and Food Production | |
| cosimti.com | Darkvault | Technology | |
| sislocar.com | Lockbit3 | Transportation | |
| Banco Promerica | Snatch | Financial Services | |
| zurcherodioraven.com | Lockbit3 | Professional Services | |
| jetboxcargo.com | Lockbit3 | Transportation | |
| ITS InfoCom | Hive | Technology |