Country
Ransomware attacks in Saudi Arabia
Ransomware groups have listed 80 organisations from Saudi Arabia on their leak sites since December 2022; the latest post is from 6 September 2026. Most active groups: Incransom, Ransomhub and Lockbit3. Most affected sector: Professional Services.
Total posts
80
First seen
2022-12-20
Latest post
2026-09-06
Groups
37
Most active groups
- Incransom 7
- Ransomhub 7
- Lockbit3 5
- Thegentlemen 5
- Alphv 4
- Dragonransomware 4
- Clop 3
- Dragonforce 3
- Killsec 3
- Nova 3
Most targeted sectors
- Professional Services 13
- Technology 12
- Manufacturing 11
- Agriculture and Food Production 7
- Energy & Utilities 7
- Retail & E-Commerce 7
- Government & Defense 5
- Healthcare 4
- Transportation 3
- Hospitality 2