Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

LY · #114 of 183 countriesWatch Libya

Ransomware Attacks In Libya.

As of Oct 19, 2026, 5 organisations in Libya have been listed as ransomware victims on leak sites, 0.0% of all confirmed victims and rank 114 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
5
Share of all victims
0.0%
Rank
#114 of 183
Most active group
Qilin
Most hit sector
Energy and Utilities

Victims Posted Per Month.

Confirmed ransomware victims in Libya per month
MonthConfirmed victims
November 20250
December 20250
January 20260
February 20260
March 20260
April 20261
May 20260
June 20261
July 20260
August 20260
September 20260
October 2026 (month in progress)0
Latest confirmed ransomware leak-site victims in Libya
VictimClaimed byCountryIndustryData claimedPosted
Central Bank of Libya
cbl.gov.ly
QilinLYLibyaFinancial ServicesNot stated
El Wastani Petroleum Company (WASCO)
wascoegypt.com
PayloadLYLibyaEnergy and Utilities50 GB
bsisp.ly
bsisp.ly
RaznatovicLYLibyaUnknownNot stated
Mellitah Oil & Gas / Enigas Ly (Eni Electricity, Oil & Gas)
mellitahog.ly
RansomHubLYLibyaManufacturing, Energy and UtilitiesNot stated
Libyana
libyana.ly
ALPHVLYLibyaEducation and ResearchNot stated

Know When A Company In Libya, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.