Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

KR · #30 of 183 countriesWatch South Korea

Ransomware Attacks In South Korea.

As of Oct 19, 2026, 140 organisations in South Korea have been listed as ransomware victims on leak sites, 0.4% of all confirmed victims and rank 30 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
140
Share of all victims
0.4%
Rank
#30 of 183
Most active group
Qilin
Most hit sector
Manufacturing

Victims Posted Per Month.

Confirmed ransomware victims in South Korea per month
MonthConfirmed victims
November 20253
December 20254
January 20261
February 20267
March 20267
April 20264
May 20262
June 20267
July 20263
August 202610
September 20267
October 2026 (month in progress)13

Most Active Groups Here

  1. Qilin2618.6% of all victims
  2. N0n117.9% of all victims
  3. LockBit 3.064.3% of all victims
  4. Gunra53.6% of all victims
  5. Beast53.6% of all victims

Most Hit Industries Here

  1. Manufacturing2115.0%
  2. Technology1913.6%
  3. Transportation and Logistics1611.4%
  4. Consulting107.1%
  5. Financial Services75.0%

Latest Victims.

All 140 victims in South Korea →
Latest confirmed ransomware leak-site victims in South Korea
VictimClaimed byCountryIndustryData claimedPosted
Taekwang Network
tkni.co.kr
EverestKRSouth KoreaTechnologyNot stated
SONGWOOI
songwooi.co.kr
The GentlemenKRSouth KoreaManufacturingNot stated
MGNP (port terminal operations)
mgnp.co.kr
N0nKRSouth KoreaTransportation and LogisticsNot stated
Polaris Shipping (dry bulk shipping)
polaris-shipping.com
N0nKRSouth KoreaTransportation and LogisticsNot stated
BNCT Busan New Container Terminal
bnctkorea.com
N0nKRSouth KoreaTransportation and LogisticsNot stated
GNCNet / DGT Busan (port community IT)
dgtbusan.com
N0nKRSouth KoreaTransportation and LogisticsNot stated
Dongkuk Steel (steel manufacturing)
dongkuk.co.kr
N0nKRSouth KoreaUnknownNot stated
Saehan Marine (ship agency operations)
shmarine.co.kr
N0nKRSouth KoreaTransportation and LogisticsNot stated

Know When A Company In South Korea, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.