Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
IR · #56 of 183 countriesWatch Iran
Ransomware Attacks In Iran.
As of Oct 19, 2026, 33 organisations in Iran have been listed as ransomware victims on leak sites, 0.1% of all confirmed victims and rank 56 of 183 countries. The most active group here is Arvin Club.
Updated continuously · figures as of Oct 19, 2026- Confirmed victims
- 33
- Share of all victims
- 0.1%
- Rank
- #56 of 183
- Most active group
- Arvin Club
- Most hit sector
- Technology
Victims Posted Per Month.
1
2
1
0
2
0
0
0
1
1
1
0
| Month | Confirmed victims |
|---|---|
| November 2025 | 1 |
| December 2025 | 2 |
| January 2026 | 1 |
| February 2026 | 0 |
| March 2026 | 2 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 1 |
| August 2026 | 1 |
| September 2026 | 1 |
| October 2026 (month in progress) | 0 |
Most Active Groups Here
Latest Victims.
All 33 victims in Iran →| Victim | Claimed by | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|---|
| Roshd Sanat roshdsanat.com | Wallstreet | IRIran | Manufacturing | Not stated | |
| Diaco Global diacocenter.com | DireWolf | IRIran | Technology | 80 GB | |
| azarestan.com azarestan.com | APT73 | IRIran | Construction | Not stated | |
| IranWire iranwire.com | Handala | IRIran | Media and Entertainment | Not stated | |
| Listen Closely, Gallant: Handala’s Eyes and Ears Are Everywhere handala-hack.tw | Handala | IRIran | Unknown | Not stated | |
| Avraham Hayyim ( Mehrdad Rahimi ) Hacked - Mossad Agent handala-hack.to | Handala | IRIran | Unknown | Not stated | |
| behranlift.com behranlift.com | LockBit 5.0 | IRIran | Manufacturing | Not stated | |
| taminsho.com taminsho.com | Benzona | IRIran | Government and Public Sector | 80 GB |
Know When A Company In Iran, Or One Of Your Suppliers, Is Posted.
Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.