Country
Ransomware attacks in Norway
Ransomware groups have listed 64 organisations from Norway on their leak sites since May 2022; the latest post is from 21 August 2026. Most active groups: Medusa, Clop and Lockbit3. Most affected sector: Professional Services.
Total posts
64
First seen
2022-05-02
Latest post
2026-08-21
Groups
36
Most active groups
- Medusa 6
- Clop 4
- Lockbit3 4
- Ransomhub 4
- Akira 3
- Dragonforce 3
- Play 3
- 8base 2
- Alphv 2
- Arcusmedia 2
Most targeted sectors
- Professional Services 15
- Manufacturing 12
- Technology 12
- Transportation 5
- Hospitality 4
- Retail & E-Commerce 4
- Energy & Utilities 3
- Government & Defense 2
- Agriculture and Food Production 1
- Education 1