Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

AU · #10 of 183 countriesWatch Australia

Ransomware Attacks In Australia.

As of Oct 19, 2026, 562 organisations in Australia have been listed as ransomware victims on leak sites, 1.7% of all confirmed victims and rank 10 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
562
Share of all victims
1.7%
Rank
#10 of 183
Most active group
Qilin
Most hit sector
Consulting

Victims Posted Per Month.

Confirmed ransomware victims in Australia per month
MonthConfirmed victims
November 202512
December 202513
January 20269
February 202617
March 20269
April 202620
May 202618
June 202613
July 202615
August 202618
September 202611
October 2026 (month in progress)9

Most Active Groups Here

  1. Qilin468.2% of all victims
  2. LockBit 3.0468.2% of all victims
  3. Clop264.6% of all victims
  4. INC Ransom264.6% of all victims
  5. ALPHV244.3% of all victims

Most Hit Industries Here

  1. Consulting6611.7%
  2. Manufacturing376.6%
  3. Healthcare295.2%
  4. Construction254.4%
  5. Education and Research244.3%

Latest Victims.

All 562 victims in Australia →
Latest confirmed ransomware leak-site victims in Australia
VictimClaimed byCountryIndustryData claimedPosted
Canva
canva.com
The-seven-deadly-sinsAUAustraliaTechnologyNot stated
St Peters Anglican Primary School
stpeters.sa.edu.au
The GentlemenAUAustraliaEducation and ResearchNot stated
Hunter Neurology
hunterneurology.com.au
N0nAUAustraliaHealthcareNot stated
poolegroup.com.au
poolegroup.com.au
LockBit 5.0AUAustraliaConsultingNot stated
All Souls St Gabriels School
allsouls.qld.edu.au
The GentlemenAUAustraliaEducation and ResearchNot stated
KOOKABARRA JUICE
kookabarra.com
Vexy-ransomwareAUAustraliaRetailNot stated
Agri Industrial
agriindustrial.com.au
EverestAUAustraliaAgricultureNot stated
Chadwick Switchboards
chadwickswitchboards.com.au
QilinAUAustraliaTechnologyNot stated

Know When A Company In Australia, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.