Country
Ransomware attacks in South Korea
Ransomware groups have listed 120 organisations from South Korea on their leak sites since January 2022; the latest post is from 9 September 2026. Most active groups: Qilin, Gunra and ULose. Most affected sector: Manufacturing.
Total posts
120
First seen
2022-01-13
Latest post
2026-09-09
Groups
55
Most active groups
- Qilin 27
- Gunra 6
- ULose 5
- Black X 4
- Coinbasecartel 4
- Nova 4
- AuditTeam 3
- Beast 3
- Darkvault 3
- Killsec 3
Most targeted sectors
- Manufacturing 35
- Technology 30
- Financial Services 16
- Healthcare 8
- Professional Services 7
- Education 5
- Energy & Utilities 4
- Retail & E-Commerce 3
- Transportation 3
- Government & Defense 2