Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

NO · #44 of 183 countriesWatch Norway

Ransomware Attacks In Norway.

As of Oct 19, 2026, 66 organisations in Norway have been listed as ransomware victims on leak sites, 0.2% of all confirmed victims and rank 44 of 183 countries. The most active group here is Clop.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
66
Share of all victims
0.2%
Rank
#44 of 183
Most active group
Clop
Most hit sector
Construction

Victims Posted Per Month.

Confirmed ransomware victims in Norway per month
MonthConfirmed victims
November 20250
December 20251
January 20261
February 20262
March 20262
April 20261
May 20261
June 20263
July 20261
August 20260
September 20261
October 2026 (month in progress)1
Latest confirmed ransomware leak-site victims in Norway
VictimClaimed byCountryIndustryData claimedPosted
Laerdal
laerdal.com
EverestNONorwayHealthcareNot stated
konsis.no
konsis.no
SettraNONorwayConsultingNot stated
Sonitor Technologies
sonitor.com
PearNONorwayHealthcareNot stated
Lørenskog kommune
lorenskog.kommune.no
CmdorganizationNONorwayGovernment and Public SectorNot stated
fasadeconsult.no
fasadeconsult.no
M3rxNONorwayConstructionNot stated
Alpha IT
alphait.no
PearNONorwayTechnology21 TB
Nordfjord Hotell
nordfjord-hotell.no
NovaNONorwayTransportation and LogisticsNot stated
Apply Capnor
applycapnor.no
DragonForceNONorwayUnknownNot stated

Know When A Company In Norway, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.