Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
MX · #12 of 183 countriesWatch Mexico
Ransomware Attacks In Mexico.
As of Oct 19, 2026, 268 organisations in Mexico have been listed as ransomware victims on leak sites, 0.8% of all confirmed victims and rank 12 of 183 countries. The most active group here is LockBit 3.0.
Updated continuously · figures as of Oct 19, 2026- Confirmed victims
- 268
- Share of all victims
- 0.8%
- Rank
- #12 of 183
- Most active group
- LockBit 3.0
- Most hit sector
- Manufacturing
Victims Posted Per Month.
11
7
9
9
3
9
11
5
7
15
9
8
| Month | Confirmed victims |
|---|---|
| November 2025 | 11 |
| December 2025 | 7 |
| January 2026 | 9 |
| February 2026 | 9 |
| March 2026 | 3 |
| April 2026 | 9 |
| May 2026 | 11 |
| June 2026 | 5 |
| July 2026 | 7 |
| August 2026 | 15 |
| September 2026 | 9 |
| October 2026 (month in progress) | 8 |
Most Active Groups Here
Latest Victims.
All 268 victims in Mexico →| Victim | Claimed by | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|---|
| Gio Dental Med Spa giodentalspa.com | The Gentlemen | MXMexico | Healthcare | Not stated | |
| grupoabg.com grupoabg.com | LockBit 5.0 | MXMexico | Consulting | Not stated | |
| Brame Telecom brametelecom.com | Qilin | MXMexico | Telecommunications | Not stated | |
| bienestarempresarial bienestarempresarial.mx | 0x00 | MXMexico | Consulting | Not stated | |
| Comisión Municipal de Agua Potable y Alcantarillado de Victoria comapavictoria.gob.mx | Qilin | MXMexico | Energy and Utilities | Not stated | |
| Ladrillera Mecanizada ladrilleramecanizada.com | Arcus Media | MXMexico | Construction | Not stated | |
| MCM Telecom mcmtelecom.com | Qilin | MXMexico | Technology | Not stated | |
| Grupo Industrial Tauro grupotauro.com | Lamashtu | MXMexico | Construction | Not stated |
Know When A Company In Mexico, Or One Of Your Suppliers, Is Posted.
Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.