Country

Ransomware attacks in Ecuador

Ransomware groups have listed 31 organisations from Ecuador on their leak sites since January 2023; the latest post is from 3 September 2026. Most active groups: Lockbit3, Qilin and Thegentlemen. Most affected sector: Government & Defense.

Total posts 31
First seen 2023-01-28
Latest post 2026-09-03
Groups 22

Ransomware victims in Ecuador per year

5 2023
7 2024
10 2025
9 2026

All 31 victims

Search every post in the full table.
Victim Group Sector Discovered
McDonald's Ecuador Vexy Ransomware Hospitality
galmack.com.ec Settra Other
Indian Motos Inmot Qilin Manufacturing
Asisken Wallstreet
Grupo Pasquel Thegentlemen Agriculture and Food Production
El Ordeno Thegentlemen Agriculture and Food Production
Superintendency of territorial planning Coinbasecartel Government & Defense
Mutualista Imbabura Vect Financial Services
https://comercialautomotriz.com Tengu Manufacturing
Ecuacorriente S.A. Thegentlemen Energy & Utilities
sipecom.com Warlock Technology
Hotam EC Handala Professional Services
Comelesa Nightspire Energy & Utilities
Universidad Técnica del Norte Ecuador Incransom Education
Cacspmec Qilin Financial Services
tecnologias.mspz2.gob.ec Babuk2 Government & Defense
Bayteq Fog Technology
www.elecgalapagos.com.ec Ransomhub Energy & Utilities
saludsa.com.ec Akira Healthcare
biodimed.com Stormous Healthcare
frigopesca.com.ec Ransomhub Agriculture and Food Production
Xtrim TVCable Akira Professional Services
todoagro Spacebears Agriculture and Food Production
quifatex.com Dispossessor Healthcare
GRUPOCREATIVO HERRERA Qilin Technology
isspol.gov Lockbit3 Government & Defense
quifatex.com Lockbit3 Transportation
Municipio de Quito Alphv Government & Defense
Comando Conjunto de las Fuerzas Armadas Del Ecuador Alphv Government & Defense
grantierra.com Lockbit3 Energy & Utilities
Seguros Equinoccial Vicesociety Financial Services