Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

DK · #40 of 183 countriesWatch Denmark

Ransomware Attacks In Denmark.

As of Oct 19, 2026, 81 organisations in Denmark have been listed as ransomware victims on leak sites, 0.3% of all confirmed victims and rank 40 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
81
Share of all victims
0.3%
Rank
#40 of 183
Most active group
Qilin
Most hit sector
Manufacturing

Victims Posted Per Month.

Confirmed ransomware victims in Denmark per month
MonthConfirmed victims
November 20251
December 20254
January 20260
February 20262
March 20261
April 20261
May 20264
June 20264
July 20262
August 20263
September 20262
October 2026 (month in progress)2
Latest confirmed ransomware leak-site victims in Denmark
VictimClaimed byCountryIndustryData claimedPosted
Refako Autodele
refako.dk
The GentlemenDKDenmarkManufacturingNot stated
Tronex A/S
tronex.dk
WallstreetDKDenmarkTechnologyNot stated
Forma Therapeutics Holdings, Inc.
novonordisk.com
NightSpireDKDenmarkHealthcareNot stated
Domis
domis.dk
The GentlemenDKDenmarkRetailNot stated
vestfrostsolutions.com
vestfrostsolutions.com
SettraDKDenmarkEducation and ResearchNot stated
Reviso Cloud Accounting Limited
reviso.com
DireWolfDKDenmarkTechnology55 GB
avkvalves.com
avkvalves.com
SettraDKDenmarkManufacturingNot stated
Boyum IT Solutions (HOT!)
boyum-it.com
GenesisDKDenmarkTechnology40.51 GB

Know When A Company In Denmark, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.