Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
CN · #22 of 183 countriesWatch China
Ransomware Attacks In China.
As of Oct 19, 2026, 185 organisations in China have been listed as ransomware victims on leak sites, 0.6% of all confirmed victims and rank 22 of 183 countries. The most active group here is LockBit 3.0.
Updated continuously · figures as of Oct 19, 2026- Confirmed victims
- 185
- Share of all victims
- 0.6%
- Rank
- #22 of 183
- Most active group
- LockBit 3.0
- Most hit sector
- Technology
Victims Posted Per Month.
2
7
3
12
5
7
0
9
8
9
8
3
| Month | Confirmed victims |
|---|---|
| November 2025 | 2 |
| December 2025 | 7 |
| January 2026 | 3 |
| February 2026 | 12 |
| March 2026 | 5 |
| April 2026 | 7 |
| May 2026 | 0 |
| June 2026 | 9 |
| July 2026 | 8 |
| August 2026 | 9 |
| September 2026 | 8 |
| October 2026 (month in progress) | 3 |
Most Active Groups Here
Most Hit Industries Here
Latest Victims.
All 185 victims in China →| Victim | Claimed by | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|---|
| SMIC US Company (Sunnyvale, CA, US arm of Semiconductor Manufacturing International Corpo... smics.com | N0n | CNChina | Manufacturing | Not stated | |
| ZPMC (port machinery and terminal engineering) zpmc.com | N0n | CNChina | Manufacturing | Not stated | |
| CULines (container shipping) culines.com | N0n | CNChina | Transportation and Logistics | Not stated | |
| newyjh.com newyjh.com | Ulose | CNChina | Unknown | Not stated | |
| Le Centre National de l'Expertise Hospitalière (CNEH) cneh.com | Kairos | CNChina | Healthcare | Not stated | |
| Northern NJ Eye Institute nnjei.com | The Gentlemen | CNChina | Healthcare | Not stated | |
| iccsi.com iccsi.com | M3rx | CNChina | Unknown | 434 GB | |
| UC Components ucomponents.com | Storm | CNChina | Retail | Not stated |
Know When A Company In China, Or One Of Your Suppliers, Is Posted.
Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.