Country
Ransomware attacks in Mexico
Ransomware groups have listed 323 organisations from Mexico on their leak sites since February 2022; the latest post is from 24 October 2026. Most active groups: Qilin, Lockbit3 and Thegentlemen. Most affected sector: Professional Services.
Total posts
323
First seen
2022-02-08
Latest post
2026-10-24
Groups
82
Most active groups
- Qilin 41
- Lockbit3 32
- Thegentlemen 22
- Lockbit5 17
- Clop 13
- Krybit 13
- Akira 9
- Safepay 9
- Incransom 8
- Ransomhub 8
Most targeted sectors
- Professional Services 56
- Manufacturing 51
- Technology 34
- Retail & E-Commerce 29
- Government & Defense 22
- Healthcare 21
- Agriculture and Food Production 20
- Transportation 17
- Hospitality 13
- Energy & Utilities 12