Industry sector
Ransomware attacks on the Financial Services sector
Ransomware groups have listed 1,750 Financial Services organisations on their leak sites since January 2022; the latest post is from 24 October 2026. Most active groups: Qilin, Lockbit3 and Akira. Most affected countries: United States, United Kingdom and Canada.
Total posts
1,750
First seen
2022-01-01
Latest post
2026-10-24
Groups
192
Most active groups
- Qilin 158
- Lockbit3 110
- Akira 104
- Clop 87
- Alphv 58
- Play 49
- Thegentlemen 49
- Incransom 47
- SilentRansomGroup 42
- Bianlian 38
Most affected countries
- United States 634
- United Kingdom 71
- Canada 68
- India 41
- Australia 28
- France 23
- Germany 22
- Indonesia 21
- Hong Kong 17
- Brazil 16
Financial Services ransomware victims per year
Latest 100 victims
Search every post in the full table.| Victim | Group | Country | Discovered |
|---|---|---|---|
| Commonwealth Community Bank | Qilin | United States | |
| SCHWAB-SYSTEM | Akira | Germany | |
| Adobe Insurance Brokers, LLC | Pear | United States | |
| CREDIN | Qilin | Portugal | |
| Merit Financial Group | Storm | United States | |
| Finzly Corp | N0n | United States | |
| WSBI-ESBG | Play | Belgium | |
| Pure Options | Play | — | |
| Macfarlan Capital Partners | Pear | United States | |
| North Bridge Venture Partners | Thegentlemen | United States | |
| Europ Assistance South Africa | Thegentlemen | South Africa | |
| Via Credit Union | Qilin | United States | |
| www.coopecaja.fi.cr | Incransom | Costa Rica | |
| Telcoe Federal Credit Union | Qilin | United States | |
| FINANCIAMENTO LTDA | Incransom | Brazil | |
| The Golden Legacy Financing | Qilin | — | |
| YYC Advisors | HYFLOCK | Malaysia | |
| Interseguro | Direwolf | Peru | |
| Admirals Trading | AuditTeam | United Arab Emirates | |
| PG Group (Pure Options) | N0n | — | |
| MoneyGram | Thegentlemen | United States | |
| lopay | Black X | United Kingdom | |
| capitalbankhaiti.biz | Lockbit5 | Haiti | |
| Gate | Crypto Exchange | BYOD | Singapore | |
| Wavecrest HFA | Incransom | United States | |
| BNYH | Qilin | — | |
| J&D Financial | Qilin | — | |
| Agio International | VYPR | United States | |
| Company #2 | N0n | Canada | |
| Genesis Credit Management | Qilin | United States | |
| goldenpearfunding.com | Settra | — | |
| MCAP — MortgageHub commercial lending platform | N0n | Canada | |
| Poca Valley Bank | Storm | United States | |
| mccordclaims.com | BrainCipher | United States | |
| PKSF — Palli Karma-Sahayak Foundation | Medusalocker | Bangladesh | |
| First Secure Bank Group | Storm | United States | |
| Guardrisk | Thegentlemen | South Africa | |
| Tobin & Company | Wallstreet | United States | |
| Majani Insurance Brokers | Vexy Ransomware | Kenya | |
| Armada Credit Bureau | Spirals | Uganda | |
| Inversiones Bolívar | Qilin | Colombia | |
| Revolut | ImNotAVillain | United Kingdom | |
| goldstarfinancial.com | BrainCipher | United States | |
| theLender | Termite | United States | |
| The Money Store | Storm | United States | |
| siinqeebank.com | Lockbit5 | Somalia | |
| PayPal support operations (Transcom WorldWide) | N0n | Sweden | |
| Argentem Creek Partners (investment firm) | N0n | United States | |
| STOKR (digital securities platform) | N0n | Luxembourg | |
| Johnson Investment Counsel | Storm | United States | |
| First Secure Community Bank | Storm | United States | |
| The State Bank | Storm | United States | |
| First Secure Bank and Trust | Storm | United States | |
| budgetms.com | Settra | Montserrat | |
| Optimum First Mortgage (Pear's acting group's promotional blog) | Blacknevas | — | |
| Insight Credit Union | Storm | United States | |
| Agenzia Vittoria Assicurazioni | Thegentlemen | Italy | |
| Dang Invest Group | Thegentlemen | Vietnam | |
| CO-OP URBAN BANK LTD | Global Secret Group | India | |
| RelyComply AML Platform | Direwolf | United Kingdom | |
| Financière d'Uzès | Panzer | France | |
| Hollard Insurance Group | Thegentlemen | South Africa | |
| Partners Group SK | Qilin | Slovakia | |
| NFM Lending | Interlock | United States | |
| CitizensPay | DYSPHOR1A | Myanmar | |
| AP CAPITAL PARTNERS LIMITED | Qilin | — | |
| GSAC Auto Financing | Storm | United States | |
| Chicago Partners Wealth Advisors | Storm | United States | |
| Macquarrie | Storm | Australia | |
| Marlborough Partners | Anubis | United Kingdom | |
| svfcu.org | Lockbit5 | United States | |
| Gale Credit Union | Akira | United States | |
| cimbsecurities.com | Incransom | Malaysia | |
| FE CREDIT | Black X | Vietnam | |
| cutlercapital | Lynx | — | |
| Jack Henry & Associates | Shinyhunters | United States | |
| Providence Investments | Qilin | United States | |
| PI***al | AuditTeam | Colombia | |
| DAB Investments | Qilin | United Kingdom | |
| finodayacapital.com | Krybit | — | |
| Northern Leasing Systems | Qilin | Canada | |
| STRUCTURED SETTLEMENT CAPITAL LLC | Qilin | United States | |
| Consultores de Seguros | Qilin | — | |
| Brookview Financial | Dragonforce | Canada | |
| Country-Wide Insurance | Booba Project | United States | |
| The Cecilian Bank | Storm | United States | |
| BOK Financial | Shinyhunters | United States | |
| Tower Insurance | Coinbasecartel | New Zealand | |
| Longhorn Investments | Coinbasecartel | — | |
| Abacus Advisors | Coinbasecartel | — | |
| LifeBank Microfinance Foundation | Coinbasecartel | Philippines | |
| PT. Bank Perekonomian Rakyat Bintan | Coinbasecartel | Indonesia | |
| First Commerce LLC | Pear | United States | |
| CAZ Investments | Thegentlemen | Belize | |
| Reviso Cloud Accounting Limited | Direwolf | Denmark | |
| acima | Iah6477 | United States | |
| AYUDHYA TH Insurance | DYSPHOR1A | Thailand | |
| CCA Bank | Everest | — | |
| usbank.com | Lockbit5 | United States | |
| Philippe Hottinguer Finance | Qilin | France |