Industry sector
Ransomware attacks on the Financial Services sector
Ransomware groups have listed 1,691 Financial Services organisations on their leak sites since January 2022; the latest post is from 9 September 2026. Most active groups: Qilin, Lockbit3 and Akira. Most affected countries: United States, United Kingdom and Canada.
Total posts
1,691
First seen
2022-01-01
Latest post
2026-09-09
Groups
183
Most active groups
- Qilin 149
- Lockbit3 110
- Akira 103
- Clop 87
- Alphv 58
- Play 47
- Incransom 44
- Thegentlemen 43
- SilentRansomGroup 42
- Bianlian 38
Most affected countries
- United States 610
- United Kingdom 69
- Canada 66
- India 40
- Australia 28
- France 23
- Germany 21
- Indonesia 21
- Hong Kong 17
- South Korea 16
Financial Services ransomware victims per year
Latest 100 victims
Search every post in the full table.| Victim | Group | Country | Discovered |
|---|---|---|---|
| RelyComply AML Platform | Direwolf | United Kingdom | |
| Financière d'Uzès | Panzer | France | |
| Hollard Insurance Group | Thegentlemen | South Africa | |
| Partners Group SK | Qilin | Slovakia | |
| NFM Lending | Interlock | United States | |
| CitizensPay | DYSPHOR1A | Myanmar | |
| AP CAPITAL PARTNERS LIMITED | Qilin | — | |
| GSAC Auto Financing | Storm | United States | |
| Chicago Partners Wealth Advisors | Storm | United States | |
| Macquarrie | Storm | Australia | |
| Marlborough Partners | Anubis | United Kingdom | |
| svfcu.org | Lockbit5 | United States | |
| Gale Credit Union | Akira | United States | |
| cimbsecurities.com | Incransom | Malaysia | |
| FE CREDIT | Black X | Vietnam | |
| cutlercapital | Lynx | — | |
| Jack Henry & Associates | Shinyhunters | United States | |
| Providence Investments | Qilin | United States | |
| PI***al | AuditTeam | Colombia | |
| DAB Investments | Qilin | United Kingdom | |
| finodayacapital.com | Krybit | — | |
| Northern Leasing Systems | Qilin | Canada | |
| STRUCTURED SETTLEMENT CAPITAL LLC | Qilin | United States | |
| Consultores de Seguros | Qilin | — | |
| Brookview Financial | Dragonforce | Canada | |
| Country-Wide Insurance | Booba Project | United States | |
| The Cecilian Bank | Storm | United States | |
| BOK Financial | Shinyhunters | United States | |
| Tower Insurance | Coinbasecartel | New Zealand | |
| Longhorn Investments | Coinbasecartel | — | |
| Abacus Advisors | Coinbasecartel | — | |
| LifeBank Microfinance Foundation | Coinbasecartel | Philippines | |
| PT. Bank Perekonomian Rakyat Bintan | Coinbasecartel | Indonesia | |
| First Commerce LLC | Pear | United States | |
| CAZ Investments | Thegentlemen | Belize | |
| Reviso Cloud Accounting Limited | Direwolf | Denmark | |
| acima | Iah6477 | United States | |
| AYUDHYA TH Insurance | DYSPHOR1A | Thailand | |
| CCA Bank | Everest | — | |
| usbank.com | Lockbit5 | United States | |
| Philippe Hottinguer Finance | Qilin | France | |
| Senvest Capital | Thegentlemen | Canada | |
| American Contractors Insurance Group | Storm | United States | |
| PayUp | Direwolf | — | |
| SpearFin Ltd | Incransom | Mauritius | |
| Third Coast Bancshares | Incransom | United States | |
| Bridgeport Capital Services | Play | United States | |
| Coface | Qilin | Italy | |
| DodoPayments | Direwolf | India | |
| Cozad Asset Management | Akira | United States | |
| GB Group S.A | Dragonforce | Poland | |
| Zara Investment Holding | Payload | Jordan | |
| JPMGROUP.CO.IN | Clop | India | |
| FISERV.COM | Clop | United States | |
| Philadelphia Insurance Companies | Ethics | United States | |
| Fondo | Direwolf | — | |
| Osmo Wallet | Direwolf | United States | |
| Coggins Insurance Agency | Global Secret Group | United States | |
| MACOFIN HELLAS S.A. | Global Secret Group | Greece | |
| Supportive Insurance Services | Storm | United States | |
| Sawyer Savings Bank | Storm | United States | |
| Pioneer Bank | Storm | United States | |
| Groupe BPCE | Thegentlemen | Vietnam | |
| Westland Insurance | Helix | Canada | |
| GCATS Investments | Play | United States | |
| J&T Bank and Trust | Qilin | United States | |
| TECHVENTURES BANK S.A. | Ransomhouse | Panama | |
| Bloom Financials | Qilin | United Kingdom | |
| albanybank.com | Orion | United States | |
| Rodschinson Investment | Everest | Belgium | |
| Preferred Financial Group | Play | United States | |
| TopMark Funding | Thegentlemen | United States | |
| Bjs Insurance & Financial | Orova | United States | |
| JK Capital Management Limited | Orova | Hong Kong | |
| Freedom Claims Management | Qilin | United States | |
| www.buzztrading104.co.za | Krybit | South Africa | |
| Philippine Savings Bank | Thegentlemen | Philippines | |
| KUVEYT TURK | CRPxO | Turkey | |
| FINANSBANK | CRPxO | Turkey | |
| ANADOLUBANK | CRPxO | Turkey | |
| ANADOLU SİGORTA | CRPxO | Turkey | |
| CFS | Thegentlemen | United States | |
| Premier Fiduciary | Thegentlemen | United Kingdom | |
| Affinity Capital | Qilin | United States | |
| Accesso | Coinbasecartel | United Kingdom | |
| Prelys Courtage | Anubis | France | |
| TFG Benefits, Inc. | Nightspire | United States | |
| Bright Star Partners Insurance | CRPxO | United States | |
| Prei Capital | CRPxO | United States | |
| Summit Hill Insurance | CRPxO | United States | |
| Farmers Mutual Fire Insurance | Global Secret Group | United States | |
| One Plus Capital | Global Secret Group | Cyprus | |
| Portman Finance Group | Global Secret Group | United Kingdom | |
| Zenith Bank Plc | ExfilSquad | Nigeria | |
| Allstate | ExfilSquad | United States | |
| CNA | Deadlock | Italy | |
| Center Of Information Technologies In Finance Public Institution | Nova | Moldova | |
| Bank of Baroda bigest indian bank bankofbaroda.bank.in | Triple X | India | |
| cashcowboy | Killsec | United States | |
| GUERREIROS seguros | Thegentlemen | Portugal |