Country
Ransomware attacks in Spain
Ransomware groups have listed 491 organisations from Spain on their leak sites since January 2022; the latest post is from 8 September 2026. Most active groups: Qilin, Lockbit3 and Akira. Most affected sector: Professional Services.
Total posts
491
First seen
2022-01-19
Latest post
2026-09-08
Groups
101
Most active groups
- Qilin 72
- Lockbit3 36
- Akira 22
- Ransomhub 20
- Thegentlemen 16
- Safepay 15
- 8base 11
- Stormous 11
- Deadlock 10
- Everest 10
Most targeted sectors
- Professional Services 100
- Manufacturing 83
- Technology 74
- Agriculture and Food Production 41
- Hospitality 34
- Retail & E-Commerce 33
- Healthcare 32
- Transportation 23
- Government & Defense 18
- Energy & Utilities 13