Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

HR · #55 of 183 countriesWatch Croatia

Ransomware Attacks In Croatia.

As of Oct 19, 2026, 33 organisations in Croatia have been listed as ransomware victims on leak sites, 0.1% of all confirmed victims and rank 55 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
33
Share of all victims
0.1%
Rank
#55 of 183
Most active group
Qilin
Most hit sector
Hospitality and Tourism

Victims Posted Per Month.

Confirmed ransomware victims in Croatia per month
MonthConfirmed victims
November 20250
December 20252
January 20260
February 20260
March 20262
April 20261
May 20260
June 20262
July 20262
August 20261
September 20262
October 2026 (month in progress)1

Most Active Groups Here

  1. Qilin412.1% of all victims
  2. LockBit 3.039.1% of all victims
  3. INC Ransom26.1% of all victims
  4. Gunra26.1% of all victims
  5. The Gentlemen26.1% of all victims

Most Hit Industries Here

  1. Hospitality and Tourism412.1%
  2. Consulting39.1%
  3. Government and Public Sector39.1%
  4. Media and Entertainment39.1%
  5. Healthcare26.1%

Latest Victims.

All 33 victims in Croatia →
Latest confirmed ransomware leak-site victims in Croatia
VictimClaimed byCountryIndustryData claimedPosted
Ministarstvo poljoprivrede, šumarstva i ribarstva
mps.hr
BarracudaHRCroatiaAgricultureNot stated
Iveta
iveta.hr
The GentlemenHRCroatiaManufacturingNot stated
meridian16.hr
meridian16.hr
KrybitHRCroatiaUnknown34.72 GB
Oleoductos del Valle
1.hr
INC RansomHRCroatiaEnergy and UtilitiesNot stated
Plitvička Jezera Nacionalni Park
np-plitvicka-jezera.hr
QilinHRCroatiaHospitality and TourismNot stated
Eko-Flor Plus d.o.o.
eko-flor.hr
DeadlockHRCroatiaRetailNot stated
Ministarstvo zdravstva Republike Hrvatske
zdravlje.gov.hr
The GentlemenHRCroatiaGovernment and Public SectorNot stated
jastrebarsko.hr
jastrebarsko.hr
3AMHRCroatiaGovernment and Public SectorNot stated

Know When A Company In Croatia, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.