Country

Ransomware attacks in Finland

Ransomware groups have listed 40 organisations from Finland on their leak sites since February 2022; the latest post is from 28 August 2026. Most active groups: Qilin, Akira and Devman. Most affected sector: Technology.

Total posts 40
First seen 2022-02-04
Latest post 2026-08-28
Groups 23

Ransomware victims in Finland per year

1 2022
5 2023
1 2024
17 2025
16 2026

All 40 victims

Search every post in the full table.
Victim Group Sector Discovered
Tramigo Qilin Transportation
SUUNTO.CN (SUUNTO.COM) Clop Retail & E-Commerce
www.kilpi-koskinen.fi Krybit Other
Naval Interior Team Qilin Government & Defense
Prism Telecom Global Secret Group Technology
Enedo Power Deadlock Energy & Utilities
Gallant Thegentlemen Technology
THL Qilin
elematic.com Lockbit5 Manufacturing
The Switch Enterprises Qilin Professional Services
index-precast.com Lockbit5 Manufacturing
maa-architects.com Dragonforce Professional Services
OKJ Group Thegentlemen Retail & E-Commerce
***m*sic.fi Devman Technology
salcom.com Lynx Technology
Tommotek Qilin Technology
kavi.fi Devman Professional Services
k*v*.fi Devman Professional Services
Octomeca Oy Ransomhouse Manufacturing
upea.com Qilin Technology
Octomeca OY Qilin Transportation
Docurail Radiant Transportation
ZEF's Qilin Education
ZEF Qilin Government & Defense
Carus Akira Energy & Utilities
Exel Composites Worldleaks Manufacturing
pzsarchitects.com Safepay Professional Services
eira-group Warlock Professional Services
saiedu.fi Safepay Education
NimuSoft Killsec Technology
daatagroup.com Clop Technology
soitinlaine.fi Threeam Retail & E-Commerce
Peikko Akira Professional Services
Fiskars Group Akira Professional Services
kwhfreeze.fi Lockbit3 Agriculture and Food Production
Laiho Group Play Manufacturing
SA.FI Malas Financial Services
Oscar Software Play Technology
UPONOR Blackbasta Manufacturing
savonia.fi Lockbit2 Education