Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

PH · #34 of 183 countriesWatch Philippines

Ransomware Attacks In Philippines.

As of Oct 19, 2026, 105 organisations in Philippines have been listed as ransomware victims on leak sites, 0.3% of all confirmed victims and rank 34 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
105
Share of all victims
0.3%
Rank
#34 of 183
Most active group
Qilin
Most hit sector
Consulting

Victims Posted Per Month.

Confirmed ransomware victims in Philippines per month
MonthConfirmed victims
November 20251
December 20256
January 20262
February 20262
March 20264
April 20265
May 20262
June 20262
July 20266
August 20269
September 20267
October 2026 (month in progress)1
Latest confirmed ransomware leak-site victims in Philippines
VictimClaimed byCountryIndustryData claimedPosted
The Golden Legacy Financing
goldenfinancing.com
QilinPHPhilippinesFinancial ServicesNot stated
New World Diagnostics
nwdi.com.ph
QilinPHPhilippinesHealthcareNot stated
fedelmundo.com.ph
fedelmundo.com.ph
SafePayPHPhilippinesEducation and ResearchNot stated
Vietnamese betting operator (GC789 network / Boundless TE)
boundlesste.ch
N0nPHPhilippinesEducation and ResearchNot stated
Westbridge Institute of Technology, Inc.
westbridge.edu.ph
EmperadorPHPhilippinesEducation and ResearchNot stated
General Santos Doctors Hospital
gsdh.com.ph
RhysidaPHPhilippinesHealthcareNot stated
cenmar-manila.com
cenmar-manila.com
SafePayPHPhilippinesManufacturingNot stated
Philippine Ports Authority
ppa.com.ph
QilinPHPhilippinesGovernment and Public SectorNot stated

Know When A Company In Philippines, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.