Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
IN · #7 of 183 countriesWatch India
Ransomware Attacks In India.
As of Oct 19, 2026, 627 organisations in India have been listed as ransomware victims on leak sites, 1.9% of all confirmed victims and rank 7 of 183 countries. The most active group here is Kill Security.
Updated continuously · figures as of Oct 19, 2026- Confirmed victims
- 627
- Share of all victims
- 1.9%
- Rank
- #7 of 183
- Most active group
- Kill Security
- Most hit sector
- Consulting
Victims Posted Per Month.
16
20
17
21
14
14
10
19
30
26
23
20
| Month | Confirmed victims |
|---|---|
| November 2025 | 16 |
| December 2025 | 20 |
| January 2026 | 17 |
| February 2026 | 21 |
| March 2026 | 14 |
| April 2026 | 14 |
| May 2026 | 10 |
| June 2026 | 19 |
| July 2026 | 30 |
| August 2026 | 26 |
| September 2026 | 23 |
| October 2026 (month in progress) | 20 |
Most Active Groups Here
Most Hit Industries Here
Latest Victims.
All 627 victims in India →| Victim | Claimed by | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|---|
| Amagi Media Labs amagi.com | N0n | INIndia | Technology | Not stated | |
| karix.com karix.com | LockBit 5.0 | INIndia | Telecommunications | Not stated | |
| neweramachines.com neweramachines.com | LockBit 5.0 | INIndia | Manufacturing | Not stated | |
| police.rajasthan.gov.in rajasthan.gov.in | Scarlettgroup | INIndia | Government and Public Sector | Not stated | |
| Enchanted Fine Jewellery enchantedfinejewellery.in | Vexy-ransomware | INIndia | Retail | Not stated | |
| Durga Bearings durgabrgs.com | Orova | INIndia | Retail | Not stated | |
| Amantya Technologies amantyatech.com | Orova | INIndia | Technology | Not stated | |
| NCT Kandla (container terminal operations) jmbaxi.com | N0n | INIndia | Transportation and Logistics | Not stated |
Know When A Company In India, Or One Of Your Suppliers, Is Posted.
Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.