Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

TR · #17 of 183 countriesWatch Türkiye

Ransomware Attacks In Türkiye.

As of Oct 19, 2026, 228 organisations in Türkiye have been listed as ransomware victims on leak sites, 0.7% of all confirmed victims and rank 17 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
228
Share of all victims
0.7%
Rank
#17 of 183
Most active group
Qilin
Most hit sector
Manufacturing

Victims Posted Per Month.

Confirmed ransomware victims in Türkiye per month
MonthConfirmed victims
November 20253
December 202512
January 20267
February 20269
March 202612
April 20267
May 202613
June 202610
July 202619
August 20268
September 202618
October 2026 (month in progress)14

Most Active Groups Here

  1. Qilin2611.4% of all victims
  2. NightSpire177.5% of all victims
  3. The Gentlemen146.1% of all victims
  4. LockBit 3.0114.8% of all victims
  5. LockBit 5.0104.4% of all victims

Most Hit Industries Here

  1. Manufacturing3314.5%
  2. Consulting177.5%
  3. Education and Research135.7%
  4. Healthcare135.7%
  5. Transportation and Logistics135.7%

Latest Victims.

All 228 victims in Türkiye →
Latest confirmed ransomware leak-site victims in Türkiye
VictimClaimed byCountryIndustryData claimedPosted
merkezilac_archives
merkezilac.com
HyflockTRTürkiyeEducation and ResearchNot stated
Asyaport (container terminal operations)
asyaport.com
N0nTRTürkiyeTransportation and LogisticsNot stated
MGT Lojistik AŞ
mgtlojistik.com
NightSpireTRTürkiyeTransportation and LogisticsNot stated
KP Industries
kpind.com
NightSpireTRTürkiyeUnknownNot stated
BONJOUR GROUP
bonjourgroup.com
MajinahanashiTRTürkiyeRetailNot stated
ETICOD
eticod.com
MajinahanashiTRTürkiyeUnknownNot stated
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates
magopsa.com
NetrunnerTRTürkiyeHealthcareNot stated
Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi
ciftay.com.tr
QilinTRTürkiyeConstructionNot stated

Know When A Company In Türkiye, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.