Country
Ransomware attacks in Mexico
Ransomware groups have listed 301 organisations from Mexico on their leak sites since February 2022; the latest post is from 5 September 2026. Most active groups: Qilin, Lockbit3 and Thegentlemen. Most affected sector: Professional Services.
Total posts
301
First seen
2022-02-08
Latest post
2026-09-05
Groups
79
Most active groups
- Qilin 34
- Lockbit3 32
- Thegentlemen 19
- Lockbit5 16
- Clop 13
- Krybit 11
- Incransom 8
- Ransomhub 8
- 8base 7
- Akira 7
Most targeted sectors
- Professional Services 53
- Manufacturing 43
- Technology 32
- Retail & E-Commerce 28
- Government & Defense 21
- Healthcare 21
- Agriculture and Food Production 19
- Transportation 17
- Hospitality 13
- Financial Services 12