Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

NZ · #42 of 183 countriesWatch New Zealand

Ransomware Attacks In New Zealand.

As of Oct 19, 2026, 74 organisations in New Zealand have been listed as ransomware victims on leak sites, 0.2% of all confirmed victims and rank 42 of 183 countries. The most active group here is LockBit 3.0.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
74
Share of all victims
0.2%
Rank
#42 of 183
Most active group
LockBit 3.0
Most hit sector
Consulting

Victims Posted Per Month.

Confirmed ransomware victims in New Zealand per month
MonthConfirmed victims
November 20250
December 20252
January 20263
February 20261
March 20261
April 20263
May 20262
June 20260
July 20261
August 20263
September 20263
October 2026 (month in progress)0

Most Active Groups Here

  1. LockBit 3.01114.9% of all victims
  2. Qilin56.8% of all victims
  3. Clop45.4% of all victims
  4. DragonForce45.4% of all victims
  5. RansomHub45.4% of all victims

Most Hit Industries Here

  1. Consulting68.1%
  2. Healthcare68.1%
  3. Manufacturing56.8%
  4. Retail45.4%
  5. Transportation and Logistics45.4%

Latest Victims.

All 74 victims in New Zealand →
Latest confirmed ransomware leak-site victims in New Zealand
VictimClaimed byCountryIndustryData claimedPosted
AHeadStart Tutoring
aheadstart.co.nz
GammaxNZNew ZealandEducation and Research57.94 GB
BRINKS-CO.NZ
brinks-co.nz
ClopNZNew ZealandTransportation and LogisticsNot stated
Praveg Caves Jawai
swiftbook.io
MedUSlockerNZNew ZealandHospitality and TourismNot stated
hatch.group
hatch.group
SettraNZNew ZealandUnknownNot stated
Tower Insurance
tower.co.nz
Coinbase CartelNZNew ZealandInsuranceNot stated
zenithtechnology
zenithtechnology.co.nz
ZawooNZNew ZealandTechnologyNot stated
ubfreight.com
ubfreight.com
M3rxNZNew ZealandTransportation and LogisticsNot stated
Alpha Group Holdings
alphagroup.nz
QilinNZNew ZealandHealthcareNot stated

Know When A Company In New Zealand, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.