Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

#2 of 28 industriesWatch Manufacturing

Manufacturing: Who Is Hitting It.

As of Oct 19, 2026, 2,286 Manufacturing organisations have been listed as ransomware victims on leak sites, 7.1% of all confirmed victims (about 1 in 14). The most active group in this sector is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
2,286
Share of all victims
7.1%
Rank
#2 of 28 sectors
Most active group
Qilin
Most hit country
United States

Victims Posted Per Month.

Confirmed ransomware victims in Manufacturing per month
MonthConfirmed victims
November 20259
December 202533
January 202673
February 202661
March 202683
April 202688
May 202691
June 202694
July 2026126
August 2026162
September 2026112
October 2026 (month in progress)63

Most Active Groups Here

  1. Qilin1958.5% of all victims
  2. The Gentlemen1576.9% of all victims
  3. Akira1536.7% of all victims
  4. Play1486.5% of all victims
  5. LockBit 3.01376.0% of all victims

Most Hit Countries In This Industry

  1. USUnited States1,03045.1%
  2. DEGermany1687.3%
  3. CACanada1275.6%
  4. GBUnited Kingdom893.9%
  5. ITItaly873.8%

Latest Victims.

All 2,286 Manufacturing victims →
Latest confirmed ransomware leak-site victims in Manufacturing
VictimClaimed byCountryIndustryData claimedPosted
GTL Concreto e Logística LTDA
gtlconcreto.com.br
EmperadorBRBrazilManufacturing2 GB
POWERsonic Industries Inc.AuroraCACanadaManufacturingNot stated
SMIC US Company (Sunnyvale, CA, US arm of Semiconductor Manufacturing International Corpo...
smics.com
N0nCNChinaManufacturingNot stated
Pergande
pergande.de
QilinDEGermanyManufacturingNot stated
ECO USA
ecousaind.com
N0nUSUnited StatesManufacturingNot stated
Rheem Global
rheem.com
HelixUSUnited StatesManufacturing2.45 GB
Chugoku Bend
bend.co.jp
EverestJPJapanManufacturingNot stated
Prafesta Ind. e Com. de Embalagens Ltda
prafesta.com.br
N0nBRBrazilManufacturingNot stated

Sector Briefings For Manufacturing, Every Week.

The Brandefense platform sends a weekly ransomware brief for your sector and region: new groups, new victims among your peers and suppliers.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.