Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

#23 of 28 industriesWatch Aerospace and Defense

Aerospace and Defense: Who Is Hitting It.

As of Oct 19, 2026, 59 Aerospace and Defense organisations have been listed as ransomware victims on leak sites, 0.2% of all confirmed victims (about 1 in 500). The most active group in this sector is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
59
Share of all victims
0.2%
Rank
#23 of 28 sectors
Most active group
Qilin
Most hit country
United States

Victims Posted Per Month.

Confirmed ransomware victims in Aerospace and Defense per month
MonthConfirmed victims
November 20250
December 20250
January 20261
February 20262
March 20260
April 20262
May 20260
June 20260
July 20264
August 20265
September 20260
October 2026 (month in progress)1
Latest confirmed ransomware leak-site victims in Aerospace and Defense
VictimClaimed byCountryIndustryData claimedPosted
R. A. Wood Associates
rawood.com
StormUSUnited StatesAerospace and DefenseNot stated
Clear Align
clearalign.com
QilinUSUnited StatesAerospace and DefenseNot stated
icnavais.com
icnavais.com
LockBit 5.0BRBrazilAerospace and DefenseNot stated
Valor Defense Solutions, Inc
valordefensesolutions.com
StormUSUnited StatesAerospace and DefenseNot stated
Marconi Industrial Services
marconi-spa.com
PlayITItalyAerospace and DefenseNot stated
Filtronic
filtronic.com
QilinGBUnited KingdomAerospace and DefenseNot stated
ASELSAN
aselsan.com
CrpxoTRTürkiyeAerospace and Defense4.5 GB
L3HARRIS
l3harris.com
KyberUSUnited StatesAerospace and DefenseNot stated

Sector Briefings For Aerospace and Defense, Every Week.

The Brandefense platform sends a weekly ransomware brief for your sector and region: new groups, new victims among your peers and suppliers.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.