Country
Ransomware attacks in Portugal
Ransomware groups have listed 94 organisations from Portugal on their leak sites since January 2022; the latest post is from 24 October 2026. Most active groups: Qilin, Thegentlemen and Lockbit3. Most affected sector: Manufacturing.
Total posts
94
First seen
2022-01-01
Latest post
2026-10-24
Groups
41
Most active groups
- Qilin 12
- Thegentlemen 11
- Lockbit3 7
- Akira 6
- Lockbit5 4
- Nova 4
- Ciphbit 3
- Lockbit2 3
- Safepay 3
- Devman 2
Most targeted sectors
- Manufacturing 16
- Professional Services 15
- Technology 13
- Agriculture and Food Production 9
- Hospitality 8
- Transportation 6
- Government & Defense 5
- Financial Services 4
- Retail & E-Commerce 4
- Energy & Utilities 3