Skip to content
CTI Academy Sponsor CTI Academy
CL

Ransomware attacks in Chile

81 organisations in Chile have been listed on ransomware leak sites, ranking #36 worldwide. Updated .

Victims
81
0.3% of global total
Global rank
#36
of 185 countries
Active groups
31
Most: Qilin
Sectors
17
Most: Technology

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Chile. Figures are computed from the tracked records, not inferred.

Chile faces 79 recorded ransomware attacks globally ranking 35th, with Qilin, Thegentlemen, and Akira among most active groups targeting tech, manufacturing and agriculture sectors.

Chile in the global picture

Chile accounts for 81 of the ransomware disclosures tracked here, ranking #36 worldwide and making up 0.3% of the global total. The sectors listed most often are Technology, Manufacturing, Agriculture and Food Production.

Who is most active in Chile

Qilin — 25 victims in Chile. Qilin ransomware was first observed in July of 2022. Thegentlemen — 11 victims in Chile. Akira — 5 victims in Chile. The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group.

Where to report an incident in Chile

National computer emergency response teams for Chile, as registered with ENISA and the teams themselves. Regional, sectoral and vendor response teams are excluded; verify current contact details before relying on them in an incident.

Ransomware threat profile: Chile

Chile ranks #36 worldwide for ransomware disclosures, with 81 victims in this database — 0.3% of the global total. The groups listing the most organisations here are Qilin, Thegentlemen and Akira.

The most frequently listed industries in Chile are Technology, Manufacturing, Agriculture and Food Production. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Chile's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Chile 81

Organization Disclosed
Isapre Consalud
Qilin
Aerotop
Qilin
Valenti Management
Interlock
CALICHE
Majinahanashi
LD Constructora
Qilin
anwo.cl
Safepay
Cotesma
Qilin
Cotesma
Qilin
forus.cl
Lockbit5
forus.cl
Lockbit5
Futuro Forestal
Qilin
S A Chile
Thegentlemen
S A Chile
Thegentlemen
Tanner
Qilin
Hospital Clnico Universidad de Chile
Direwolf
Incolur
Thegentlemen
Difor
Qilin
Espac
Thegentlemen
Layher
Thegentlemen
AGUNSA
Qilin
servmarmg.cl
Ms13089
CALICHE
Majinahanashi
CONTAC Ingenieros
Thegentlemen
Las Cenizas
Thegentlemen
servitelco
Qilin
Hardware Asesorias Software Ltda
Deadlock
Vinilon
Deadlock
Hokua
Ailock
ATCOM Outsourcing
Qilin
Enciso Ltda
Thegentlemen
Clinica Maitenes
Qilin
Comercial Echave Turri Limitada
Qilin
Calidra
Qilin
seit.cl
Apt73
Frutcola Olmué
Qilin
SAAM Towage
Qilin
Noi Hotels
Qilin
Cortporation Colina
Thegentlemen
davila.cl
Lockbit5
Keylogistics Chile
Lynx
Graneles de Chile
Qilin
isesa.cl
Lockbit5
Conectados Chile S.A.
Qilin
Ducasse Comercial Ltda
Qilin
Instituto Nacional de Derechos Humanos
Thegentlemen
www.pucobre.cl
Incransom
Valbifrut
Qilin
Copec S.A.
Anubis
Clínica Dávila
Devman
d*v***.cl
Devman
Keylogistics Chile SA
Minteye
Pangea
Qilin
www.officepro.cl
Qilin
Liceo Francés Antoine y Consuelo de Saint-Exupéry
Thegentlemen
nubox.com & sumasaas.com
Alphalocker
Universidad Mayor
Direwolf
Petroquim Chile
Nightspire
university of chile
Lynx
Agencia Browne y Espinoza
Akira
Emotrans Chile
Nightspire
caschile.cl
Vanhelsing
Megacentro
Hunters
Ricardo Rodriguez
Qilin
www.cmsg.cl
Ransomhub
Saint George's College (saintgeorge.cl)
Fog
emin.cl
Akira
garcesfruit.com
Akira
Farmacia Cofar
Killsec
web.vaips.cl
Funksec
logikaservicios.cl
Dragonransomware
Inmobiliaria Armas
Medusa
Lexco
Meow
www.usm.cl
Ransomhub
Country Club El Bosque
Arcusmedia
Financoop
Akira
acfin.cl
Cactus
amsoft.cl
Lockbit3
salmonesaysen.cl
Lockbit3
GRUPOCREATIVO
Qilin
Desarrollo De Tecnologia y Sistemas Ltda
Akira
tormetal.cl
Lockbit3

Frequently asked questions

How many ransomware attacks have occurred in Chile?

Chile has recorded 81 ransomware victim disclosures in this database, ranking #36 globally. This represents 0.3% of all tracked ransomware attacks worldwide.

Which ransomware groups target Chile?

The ransomware groups most active in Chile are Qilin, Thegentlemen, Akira, Lockbit5. These groups collectively account for the majority of victim disclosures attributed to Chile.

Which industries are most targeted by ransomware in Chile?

In Chile, the most frequently targeted sectors are Technology, Manufacturing, Agriculture and Food Production. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Chile rank globally for ransomware attacks?

Chile ranks #36 globally for ransomware attacks with 81 victim disclosures, representing 0.3% of the worldwide total of 24,049 tracked victims.

How can organisations in Chile protect against ransomware?

Organisations in Chile should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Chile is also recommended.