Country
Ransomware attacks in Sweden
Ransomware groups have listed 151 organisations from Sweden on their leak sites since April 2022; the latest post is from 7 September 2026. Most active groups: Play, Qilin and Akira. Most affected sector: Manufacturing.
Total posts
151
First seen
2022-04-19
Latest post
2026-09-07
Groups
53
Most active groups
- Play 15
- Qilin 12
- Akira 10
- Thegentlemen 10
- Lockbit3 9
- 8base 7
- Dragonforce 6
- Lynx 6
- Ransomhub 6
- Incransom 5
Most targeted sectors
- Manufacturing 50
- Professional Services 21
- Technology 20
- Retail & E-Commerce 13
- Transportation 13
- Healthcare 9
- Government & Defense 6
- Hospitality 6
- Agriculture and Food Production 4
- Education 3