Country
Ransomware attacks in Ukraine
Ransomware groups have listed 10 organisations from Ukraine on their leak sites since May 2023; the latest post is from 27 October 2026. Most active groups: Qilin, AuditTeam and Dragonforce. Most affected sector: Technology.
Total posts
10
First seen
2023-05-03
Latest post
2026-10-27
Groups
5
Most active groups
- Qilin 4
- AuditTeam 2
- Dragonforce 2
- Nova 1
- Royal 1
Most targeted sectors
- Technology 3
- Government & Defense 2
- Manufacturing 2
- Education 1
- Professional Services 1
- Transportation 1
Ransomware victims in Ukraine per year
All 10 victims
Search every post in the full table.| Victim | Group | Sector | Discovered |
|---|---|---|---|
| Zhito Technology | Dragonforce | Technology | |
| Wise IT | AuditTeam | Technology | |
| Wi***IT | AuditTeam | Technology | |
| SHERIFF | Qilin | Government & Defense | |
| Lexus | Qilin | Manufacturing | |
| wmsopko.com | Dragonforce | Manufacturing | |
| Stark Shipping | Nova | Transportation | |
| Ministry of Foreign Affairs of Ukraine | Qilin | Government & Defense | |
| favbet | Qilin | Professional Services | |
| ZBW News | Royal | Education |