Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

SA · #39 of 183 countriesWatch Saudi Arabia

Ransomware Attacks In Saudi Arabia.

As of Oct 19, 2026, 82 organisations in Saudi Arabia have been listed as ransomware victims on leak sites, 0.3% of all confirmed victims and rank 39 of 183 countries. The most active group here is The Gentlemen.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
82
Share of all victims
0.3%
Rank
#39 of 183
Most active group
The Gentlemen
Most hit sector
Consulting

Victims Posted Per Month.

Confirmed ransomware victims in Saudi Arabia per month
MonthConfirmed victims
November 20254
December 20253
January 20261
February 20263
March 20261
April 20263
May 20261
June 20261
July 20263
August 20264
September 20262
October 2026 (month in progress)2

Most Active Groups Here

  1. The Gentlemen78.5% of all victims
  2. Clop56.1% of all victims
  3. INC Ransom56.1% of all victims
  4. RansomHub56.1% of all victims
  5. ALPHV44.9% of all victims

Most Hit Industries Here

  1. Consulting1214.6%
  2. Technology911.0%
  3. Manufacturing89.8%
  4. Energy and Utilities67.3%
  5. Construction56.1%

Latest Victims.

All 82 victims in Saudi Arabia →
Latest confirmed ransomware leak-site victims in Saudi Arabia
VictimClaimed byCountryIndustryData claimedPosted
NEOM Ports (industrial port operations)
portofneom.com
N0nSASaudi ArabiaTransportation and LogisticsNot stated
nodhom.com
nodhom.com
HyflockSASaudi ArabiaTechnologyNot stated
efada.sa
efada.sa
KrybitSASaudi ArabiaHealthcareNot stated
KHALED ALFAGIH ENGINEERING CONSULTANCY
kfoco.com
PanzerSASaudi ArabiaConsultingNot stated
Saudi Consulting Services SAUD CONSULT
saudconsult.com
The GentlemenSASaudi ArabiaConsultingNot stated
Almeer
al-meergroup.com
The GentlemenSASaudi ArabiaEducation and ResearchNot stated
AWJ Holding
awjholding.com
The GentlemenSASaudi ArabiaConstructionNot stated
MTCO (Mahmoud Altaheni & Partners Trading Co)
mtest.com.sa
GammaxSASaudi ArabiaConsultingNot stated

Know When A Company In Saudi Arabia, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.