Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy

Ransomware attacks by country

Leak-site victims grouped by the country the organisation is based in. The five most targeted countries account for 58% of all 23,094 listings.

Updated

All countries 179

# Country Victims
1 USUnited States 9,971
2 DEGermany 981
3 CACanada 964
4 GBUnited Kingdom 949
5 ITItaly 604
6 FRFrance 563
7 BRBrazil 514
8 INIndia 485
9 ESSpain 462
10 AUAustralia 402
11 JPJapan 293
12 MXMexico 283
13 CHSwitzerland 217
14 ARArgentina 199
15 TWTaiwan 198
16 SGSingapore 186
17 THThailand 184
18 AEUAE 170
19 TRTurkey 168
20 SESweden 150
21 ILIsrael 147
22 NLNetherlands 142
23 COColombia 141
24 BEBelgium 141
25 MYMalaysia 137
26 KRSouth Korea 132
27 IDIndonesia 128
28 CNChina 123
29 PLPoland 119
30 ATAustria 117
31 ZASouth Africa 109
32 HKHong Kong 105
33 CZCzech Republic 96
34 PEPeru 84
35 PHPhilippines 79
36 CLChile 76
37 SASaudi Arabia 74
38 PTPortugal 73
39 VNVietnam 72
40 DKDenmark 70
41 EGEgypt 68
42 IEIreland 67
43 RURussia 62
44 RORomania 62
45 NONorway 55
46 NZNew Zealand 51
47 GRGreece 49
48 FIFinland 44
49 PKPakistan 39
50 VEVenezuela 32
51 HRCroatia 30
52 BGBulgaria 30
53 ECEcuador 29
54 MAMorocco 27
55 IRIran 25
56 BDBangladesh 25
57 HUHungary 25
58 SKSlovakia 24
59 KEKenya 24
60 DODominican Republic 23
61 OMOman 22
62 TNTunisia 22
63 PRPuerto Rico 21
64 NGNigeria 21
65 UYUruguay 20
66 LULuxembourg 20
67 CRCosta Rica 19
68 PAPanama 19
69 JOJordan 19
70 CYCyprus 18
71 QAQatar 17
72 PYParaguay 17
73 GTGuatemala 17
74 LKSri Lanka 16
75 LBLebanon 15
76 KWKuwait 14
77 BOBolivia 14
78 NANamibia 13
79 JMJamaica 13
80 SVEl Salvador 12
81 RSSerbia 12
82 MTMalta 11
83 DZAlgeria 10
84 TTTrinidad and Tobago 10
85 UAUkraine 10
86 GHGhana 10
87 GEGeorgia 9
88 TZTanzania 9
89 MMMyanmar 9
90 LVLatvia 9
91 IQIraq 9
92 SISlovenia 9
93 BSBahamas 9
94 BBBarbados 9
95 SNSenegal 8
96 LTLithuania 8
97 MNMongolia 8
98 LALaos 7
99 MUMauritius 7
100 ZWZimbabwe 7
101 ZMZambia 7
102 SJSvalbard and Jan Mayen 7
103 UZUzbekistan 6
104 MDMoldova 6
105 MKNorth Macedonia 6
106 ISIceland 6
107 CICôte d’Ivoire 6
108 BWBotswana 6
109 BHBahrain 6
110 MOMacao 5
111 BABosnia and Herzegovina 5
112 MCMonaco 5
113 PSPalestine 5
114 KHCambodia 5
115 FJFiji 5
116 BYBelarus 5
117 TVTuvalu 5
118 BZBelize 4
119 HTHaiti 4
120 TLTimor-Leste 4
121 AGAntigua & Barbuda 4
122 UGUganda 4
123 AOAngola 4
124 GAGabon 4
125 HNHonduras 4
126 CMCameroon 4
127 LYLibya 4
128 BMBermuda 4
129 EEEstonia 4
130 VGBritish Virgin Islands 4
131 AWAruba 4
132 SDSudan 4
133 KZKazakhstan 3
134 WSSamoa 3
135 ALAlbania 3
136 AZAzerbaijan 3
137 ADAndorra 3
138 AMArmenia 3
139 SCSeychelles 3
140 ETEthiopia 3
141 NPNepal 3
142 PWPalau 3
143 DMDominica 3
144 AFAfghanistan 3
145 MLMali 2
146 MSMontserrat 2
147 BTBhutan 2
148 AIAnguilla 2
149 YEYemen 2
150 PGPapua New Guinea 2
151 NINicaragua 2
152 TCTurks & Caicos Islands 2
153 NENiger 2
154 MVMaldives 2
155 MGMadagascar 2
156 MZMozambique 2
157 TOTonga 2
158 CWCuraçao 2
159 KYCayman Islands 2
160 TDChad 2
161 TKTokelau 2
162 SOSomalia 1
163 YTMayotte 1
164 MEMontenegro 1
165 VAVatican City 1
166 LSLesotho 1
167 RERéunion 1
168 CDDR Congo 1
169 GYGuyana 1
170 RWRwanda 1
171 KIKiribati 1
172 TJTajikistan 1
173 MRMauritania 1
174 SYSyria 1
175 FOFaroe Islands 1
176 DJDjibouti 1
177 JEJersey 1
178 CGRepublic of the Congo 1
179 VCSt. Vincent & Grenadines 1

Country is the location recorded for the victim organisation in the leak-site listing, which for multinationals is usually the headquarters. Listings without a recorded country are counted in the global total only.