Country
Ransomware attacks in Japan
Ransomware groups have listed 320 organisations from Japan on their leak sites since February 2022; the latest post is from 9 September 2026. Most active groups: Qilin, Lockbit3 and Thegentlemen. Most affected sector: Manufacturing.
Total posts
320
First seen
2022-02-14
Latest post
2026-09-09
Groups
85
Most active groups
- Qilin 40
- Lockbit3 23
- Thegentlemen 20
- Clop 15
- Ransomhub 12
- Alphv 11
- Safepay 11
- 8base 10
- Akira 10
- Everest 9
Most targeted sectors
- Manufacturing 108
- Technology 73
- Retail & E-Commerce 27
- Professional Services 23
- Agriculture and Food Production 18
- Healthcare 14
- Financial Services 8
- Transportation 8
- Energy & Utilities 7
- Education 4