Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

SV · #88 of 183 countriesWatch El Salvador

Ransomware Attacks In El Salvador.

As of Oct 19, 2026, 13 organisations in El Salvador have been listed as ransomware victims on leak sites, 0.0% of all confirmed victims and rank 88 of 183 countries. The most active group here is SafePay.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
13
Share of all victims
0.0%
Rank
#88 of 183
Most active group
SafePay
Most hit sector
Education and Research

Victims Posted Per Month.

Confirmed ransomware victims in El Salvador per month
MonthConfirmed victims
November 20250
December 20250
January 20260
February 20260
March 20260
April 20261
May 20260
June 20261
July 20260
August 20260
September 20261
October 2026 (month in progress)0

Most Active Groups Here

  1. SafePay215.4% of all victims
  2. Rhysida215.4% of all victims
  3. RansomHub215.4% of all victims
  4. INC Ransom17.7% of all victims
  5. Babuk217.7% of all victims

Most Hit Industries Here

  1. Education and Research323.1%
  2. Construction17.7%
  3. Financial Services17.7%
  4. Manufacturing17.7%

Latest Victims.

All 13 victims in El Salvador →
Latest confirmed ransomware leak-site victims in El Salvador
VictimClaimed byCountryIndustryData claimedPosted
Catholic University of El Salvador
univo.edu.sv
WallstreetSVEl SalvadorEducation and ResearchNot stated
PROBE, S.A. DE C.V
grupoprobe.com
KrybitSVEl SalvadorUnknownNot stated
Optima Servicios Financieros
optima.com.sv
The GentlemenSVEl SalvadorFinancial ServicesNot stated
DILOSA FOOD COMPANIES
dilosafoods.com
INC RansomSVEl SalvadorUnknownNot stated
DelCampo
delcampo.education
QilinSVEl SalvadorEducation and ResearchNot stated
constelacion.com.sv
constelacion.com.sv
Babuk2SVEl SalvadorUnknownNot stated
termopuerto.com
termopuerto.com
SafePaySVEl SalvadorUnknownNot stated
itca.edu.sv
itca.edu.sv
SafePaySVEl SalvadorEducation and ResearchNot stated

Know When A Company In El Salvador, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.