Country
Ransomware attacks in Sri Lanka
Ransomware groups have listed 20 organisations from Sri Lanka on their leak sites since May 2023; the latest post is from 1 July 2026. Most active groups: Cloak, Payload and 8base. Most affected sector: Technology.
Total posts
20
First seen
2023-05-23
Latest post
2026-07-01
Groups
18
Most active groups
- Cloak 2
- Payload 2
- 8base 1
- Alphv 1
- Blacknevas 1
- Clop 1
- Darkvault 1
- Dragonforce 1
- Hunters 1
- Kryptos 1
Most targeted sectors
- Technology 4
- Agriculture and Food Production 3
- Professional Services 3
- Financial Services 2
- Government & Defense 2
- Hospitality 2
- Manufacturing 2
- Retail & E-Commerce 1
Ransomware victims in Sri Lanka per year
All 20 victims
Search every post in the full table.| Victim | Group | Sector | Discovered |
|---|---|---|---|
| Abans Group | Blacknevas | Retail & E-Commerce | |
| Synex International Pvt Ltd | Dragonforce | Technology | |
| SIRILAK SEAFOOD (PW) LTD. | Titan | Agriculture and Food Production | |
| Ceywater Consultants | Worldleaks | Professional Services | |
| Marino Food Products Pvt | Payload | Agriculture and Food Production | |
| NKAR Travels & Tours | Payload | Hospitality | |
| MASHOLDINGS.COM | Clop | Manufacturing | |
| Provincial Department of Health Services Sri Lanka | Kryptos | Government & Defense | |
| www.midcity.lk | Yurei | Agriculture and Food Production | |
| Pensions.gov.lk | Cloak | Government & Defense | |
| VS One Technology | Nova | Technology | |
| Pe*************.lk | Cloak | — | |
| Cargills Bank | Hunters | Financial Services | |
| Richardson | Qilin | Professional Services | |
| PeoplesHR | Meow | Technology | |
| lankacom.net | Darkvault | Professional Services | |
| Varna Packaging | 8base | Manufacturing | |
| sicl.lk | Lockbit3 | Financial Services | |
| Jubilant | Alphv | Hospitality | |
| Paragon Software Lanka | Play | Technology |