Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

GT · #63 of 183 countriesWatch Guatemala

Ransomware Attacks In Guatemala.

As of Oct 19, 2026, 27 organisations in Guatemala have been listed as ransomware victims on leak sites, 0.1% of all confirmed victims and rank 63 of 183 countries. The most active group here is Krybit.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
27
Share of all victims
0.1%
Rank
#63 of 183
Most active group
Krybit
Most hit sector
Consulting

Victims Posted Per Month.

Confirmed ransomware victims in Guatemala per month
MonthConfirmed victims
November 20250
December 20252
January 20261
February 20260
March 20260
April 20260
May 20260
June 20262
July 20260
August 20264
September 20263
October 2026 (month in progress)0

Most Active Groups Here

  1. Krybit414.8% of all victims
  2. The Gentlemen311.1% of all victims
  3. LockBit 3.0311.1% of all victims
  4. Clop27.4% of all victims
  5. Qilin27.4% of all victims

Most Hit Industries Here

  1. Consulting311.1%
  2. Financial Services311.1%
  3. Government and Public Sector311.1%
  4. Healthcare311.1%
  5. Manufacturing311.1%

Latest Victims.

All 27 victims in Guatemala →
Latest confirmed ransomware leak-site victims in Guatemala
VictimClaimed byCountryIndustryData claimedPosted
Somit
somit.com
The GentlemenGTGuatemalaInsuranceNot stated
ligacancerguate.org
ligacancerguate.org
KrybitGTGuatemalaHealthcare78.11 GB
incan.org.gt
incan.org.gt
KrybitGTGuatemalaHealthcare78.11 GB
ferretornillos.gt
ferretornillos.gt
KrybitGTGuatemalaAgricultureNot stated
Cinépolis
cinepolis.com
QilinGTGuatemalaMedia and EntertainmentNot stated
Osmo Wallet
osmomoney.com
DireWolfGTGuatemalaFinancial ServicesNot stated
ferretornillos.com
ferretornillos.com
L-groupGTGuatemalaRetail27 GB
Liztex Guatemala
liztex.com
The GentlemenGTGuatemalaManufacturingNot stated

Know When A Company In Guatemala, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.