Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

UA · #81 of 183 countriesWatch Ukraine

Ransomware Attacks In Ukraine.

As of Oct 19, 2026, 15 organisations in Ukraine have been listed as ransomware victims on leak sites, 0.0% of all confirmed victims and rank 81 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
15
Share of all victims
0.0%
Rank
#81 of 183
Most active group
Qilin
Most hit sector
Technology

Victims Posted Per Month.

Confirmed ransomware victims in Ukraine per month
MonthConfirmed victims
November 20251
December 20250
January 20260
February 20260
March 20260
April 20260
May 20261
June 20260
July 20260
August 20260
September 20261
October 2026 (month in progress)2
Latest confirmed ransomware leak-site victims in Ukraine
VictimClaimed byCountryIndustryData claimedPosted
Yarema
yarema.ua
AkiraUAUkraineLegal ServicesNot stated
PMG Project Management Group
pmg-group.com
NightSpireUAUkraineConsultingNot stated
Wise IT
wiseit.com.ua
AuditteamUAUkraineTechnologyNot stated
SHERIFF
sheriff.com.ua
QilinUAUkraineGovernment and Public SectorNot stated
Stark Shipping
starkshipping.net
NovaUAUkraineUnknown275 GB
proxy-sale.com
proxy-sale.com
RansomedVCUAUkraineTechnologyNot stated
wantager.com
wantager.com
RansomedVCUAUkraineUnknownNot stated
SoftServeRansomExxUAUkraineUnknownNot stated

Know When A Company In Ukraine, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.