Country
Ransomware attacks in Lebanon
Ransomware groups have listed 16 organisations from Lebanon on their leak sites since July 2023; the latest post is from 3 June 2026. Most active groups: Funksec, Helldown and Lockbit3. Most affected sector: Professional Services.
Total posts
16
First seen
2023-07-19
Latest post
2026-06-03
Groups
12
Most active groups
- Funksec 2
- Helldown 2
- Lockbit3 2
- Stormous 2
- Babuk2 1
- Devman 1
- Dragonforce 1
- ElDorado 1
- Global 1
- Payload 1
Most targeted sectors
All sectors →Ransomware victims in Lebanon per year
All 16 victims
Search every post in the full table.| Victim | Group | Sector | Discovered |
|---|---|---|---|
| SETS Solutions | Dragonforce | Professional Services | |
| SAYEGH | Payload | Education | |
| Malia Group | Thegentlemen | Manufacturing | |
| solidere | Devman | Energy & Utilities | |
| awmedicalvillage.org | Global | Healthcare | |
| kfar hatta medical center - Lebanon | Babuk2 | Healthcare | |
| myisp.live | Funksec | Technology | |
| moph.gov.lb | Funksec | Healthcare | |
| cmclb.com | ElDorado | Professional Services | |
| khonaysser.com | Helldown | Energy & Utilities | |
| Khonaysser | Helldown | Energy & Utilities | |
| ccj.edu.lb | Qilin | Education | |
| lostlb | Stormous | Technology | |
| education.eeb-lost | Stormous | Education | |
| sealco-leb.com | Lockbit3 | Professional Services | |
| obeidpartners.com | Lockbit3 | Professional Services |