Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

DE · #4 of 183 countriesWatch Germany

Ransomware Attacks In Germany.

As of Oct 19, 2026, 1,148 organisations in Germany have been listed as ransomware victims on leak sites, 3.6% of all confirmed victims and rank 4 of 183 countries. The most active group here is SafePay.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
1,148
Share of all victims
3.6%
Rank
#4 of 183
Most active group
SafePay
Most hit sector
Manufacturing

Victims Posted Per Month.

Confirmed ransomware victims in Germany per month
MonthConfirmed victims
November 202517
December 202542
January 202622
February 202626
March 202632
April 202640
May 202630
June 202640
July 202655
August 202662
September 202632
October 2026 (month in progress)23

Most Active Groups Here

  1. SafePay12711.1% of all victims
  2. Qilin837.2% of all victims
  3. LockBit 3.0716.2% of all victims
  4. Akira615.3% of all victims
  5. Clop504.4% of all victims

Most Hit Industries Here

  1. Manufacturing16814.6%
  2. Consulting1089.4%
  3. Technology736.4%
  4. Transportation and Logistics514.4%
  5. Construction474.1%

Latest Victims.

All 1,148 victims in Germany →
Latest confirmed ransomware leak-site victims in Germany
VictimClaimed byCountryIndustryData claimedPosted
dac********er.de
er.de
CloakDEGermanyUnknownNot stated
Pergande
pergande.de
QilinDEGermanyManufacturingNot stated
Minkon
minkon-international.com
BravoxDEGermanyManufacturingNot stated
REGiO Nord
regio-nord.com
The GentlemenDEGermanyEducation and ResearchNot stated
Wolf & Sofsky GmbH
wolfusofsky.de
INC RansomDEGermanyConstructionNot stated
Lambertinum Seniorenwohnanlage
lambertinum.de
WallstreetDEGermanyHealthcareNot stated
DFK Group
dfkag.de
PlayDEGermanyConstructionNot stated
Rechtsanwaltskanzlei Dr. Bien
bien-rechtsanwaelte.de
AuroraDEGermanyLegal ServicesNot stated

Know When A Company In Germany, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.