Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Transportation and Logistics: Who Is Hitting It.

As of Oct 19, 2026, 727 Transportation and Logistics organisations have been listed as ransomware victims on leak sites, 2.3% of all confirmed victims (about 1 in 43). The most active group in this sector is Qilin.

Updated continuously ยท figures as of Oct 19, 2026
Confirmed victims
727
Share of all victims
2.3%
Rank
#9 of 28 sectors
Most active group
Qilin
Most hit country
United States

Victims Posted Per Month.

Confirmed ransomware victims in Transportation and Logistics per month
MonthConfirmed victims
November 20252
December 20259
January 202636
February 202642
March 202638
April 202647
May 202644
June 202632
July 202657
August 202657
September 202648
October 2026 (month in progress)58
Latest confirmed ransomware leak-site victims in Transportation and Logistics
VictimClaimed byCountryIndustryData claimedPosted
Baltimore Tank Lines
baltimoretanklines.com
StormUSUnited StatesTransportation and LogisticsNot stated
Patriot Maritime
patriotships.com
StormUSUnited StatesTransportation and LogisticsNot stated
BRUTRA Logistek
brutra-logistiek.nl
QilinNLNetherlandsTransportation and LogisticsNot stated
Brenner Base Tunnel
bbt-se.com
EverestITItalyTransportation and LogisticsNot stated
AirQ
airq-ad.com
The GentlemenAEUnited Arab EmiratesTransportation and LogisticsNot stated
Adams Warehouse & Delivery, Inc.AuroraUSUnited StatesTransportation and LogisticsNot stated
Keio Corporation
keio.co.jp
QilinJPJapanTransportation and LogisticsNot stated
Interior Technologies
avanzar.com
N0nUSUnited StatesTransportation and LogisticsNot stated

Sector Briefings For Transportation and Logistics, Every Week.

The Brandefense platform sends a weekly ransomware brief for your sector and region: new groups, new victims among your peers and suppliers.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.