Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

TH · #15 of 183 countriesWatch Thailand

Ransomware Attacks In Thailand.

As of Oct 19, 2026, 237 organisations in Thailand have been listed as ransomware victims on leak sites, 0.7% of all confirmed victims and rank 15 of 183 countries. The most active group here is The Gentlemen.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
237
Share of all victims
0.7%
Rank
#15 of 183
Most active group
The Gentlemen
Most hit sector
Manufacturing

Victims Posted Per Month.

Confirmed ransomware victims in Thailand per month
MonthConfirmed victims
November 20256
December 20257
January 20267
February 202615
March 202612
April 202614
May 202611
June 202615
July 20268
August 202611
September 20264
October 2026 (month in progress)9
Latest confirmed ransomware leak-site victims in Thailand
VictimClaimed byCountryIndustryData claimedPosted
Wellington College International School Bangkok
wellingtoncollege.ac.th
The GentlemenTHThailandEducation and ResearchNot stated
CAS Paper Mill
caspapermill.com
The GentlemenTHThailandManufacturingNot stated
Thai Ha PCL KASET
kasetbrand.co.th
The GentlemenTHThailandAgricultureNot stated
Museum Siam
museumsiam.org
The GentlemenTHThailandHospitality and TourismNot stated
skycc.co.th
skycc.co.th
LockBit 5.0THThailandConsultingNot stated
Royal Thai Air Force
rtaf.mi.th
The GentlemenTHThailandGovernment and Public SectorNot stated
Sinae Phuket Luxury Hotel
sinaephuket.com
NightSpireTHThailandHospitality and TourismNot stated
Asia Era One
asiaeraone.com
QilinTHThailandMedia and EntertainmentNot stated

Know When A Company In Thailand, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.