Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
TH · #15 of 183 countriesWatch Thailand
Ransomware Attacks In Thailand.
As of Oct 19, 2026, 237 organisations in Thailand have been listed as ransomware victims on leak sites, 0.7% of all confirmed victims and rank 15 of 183 countries. The most active group here is The Gentlemen.
Updated continuously · figures as of Oct 19, 2026- Confirmed victims
- 237
- Share of all victims
- 0.7%
- Rank
- #15 of 183
- Most active group
- The Gentlemen
- Most hit sector
- Manufacturing
Victims Posted Per Month.
6
7
7
15
12
14
11
15
8
11
4
9
| Month | Confirmed victims |
|---|---|
| November 2025 | 6 |
| December 2025 | 7 |
| January 2026 | 7 |
| February 2026 | 15 |
| March 2026 | 12 |
| April 2026 | 14 |
| May 2026 | 11 |
| June 2026 | 15 |
| July 2026 | 8 |
| August 2026 | 11 |
| September 2026 | 4 |
| October 2026 (month in progress) | 9 |
Most Active Groups Here
Latest Victims.
All 237 victims in Thailand →| Victim | Claimed by | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|---|
| Wellington College International School Bangkok wellingtoncollege.ac.th | The Gentlemen | THThailand | Education and Research | Not stated | |
| CAS Paper Mill caspapermill.com | The Gentlemen | THThailand | Manufacturing | Not stated | |
| Thai Ha PCL KASET kasetbrand.co.th | The Gentlemen | THThailand | Agriculture | Not stated | |
| Museum Siam museumsiam.org | The Gentlemen | THThailand | Hospitality and Tourism | Not stated | |
| skycc.co.th skycc.co.th | LockBit 5.0 | THThailand | Consulting | Not stated | |
| Royal Thai Air Force rtaf.mi.th | The Gentlemen | THThailand | Government and Public Sector | Not stated | |
| Sinae Phuket Luxury Hotel sinaephuket.com | NightSpire | THThailand | Hospitality and Tourism | Not stated | |
| Asia Era One asiaeraone.com | Qilin | THThailand | Media and Entertainment | Not stated |
Know When A Company In Thailand, Or One Of Your Suppliers, Is Posted.
Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.