Czech Republic
CZRansomware victim intelligence profile ยท Ranked #33 globally ยท Updated: Sep 5, 2026
ThreatAI Analysis
Compiled from this database and the ransomware.live profiles of the groups active in Czech Republic. Figures are computed from the tracked records, not inferred.
Czech Republic sees ransomware activity recorded against 85 victims ranked as the 33rd most active globally; notable groups include Thegentlemen, Qilin, Akira with Manufacturing, Technology, Business Services hardest hit.
Czech Republic in the global picture
Czech Republic accounts for 87 of the ransomware disclosures tracked here, ranking #33 worldwide and making up 0.4% of the global total. The sectors listed most often are Manufacturing, Technology, Business Services.
Who is most active in Czech Republic
Thegentlemen โ 13 victims in Czech Republic. Qilin โ 10 victims in Czech Republic. Qilin ransomware was first observed in July of 2022. Akira โ 8 victims in Czech Republic. The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group.
Where to report an incident in Czech Republic
- Government CERT of the Czech Republic ยท [email protected] ยท website
- Government CERT of the Czech Republic ยท [email protected] ยท website
National computer emergency response teams for Czech Republic, as registered with ENISA and the teams themselves. Regional, sectoral and vendor response teams are excluded; verify current contact details before relying on them in an incident.
Ransomware Threat Profile: Czech Republic
Czech Republic ranks #33 globally for ransomware attacks, with 87 confirmed victims in this database โ representing 0.4% of the worldwide total. The most active ransomware groups targeting Czech Republic include Thegentlemen, Qilin, Akira.
The most frequently targeted industries in Czech Republic are Manufacturing, Technology, Business Services. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
Czech Republic's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in Czech Republic should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in Czech Republic (showing 87 of 87)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | kdynium.cz | Zawoo | Technology | Aug 30, 2026 |
| 2 | dece.cz | Lockbit5 | Technology | Aug 27, 2026 |
| 3 | Freelom | Spacebears | โ | Aug 22, 2026 |
| 4 | www.mestojilemnice.cz | Krybit | Other | Aug 19, 2026 |
| 5 | SAGASTA sro | Panzer | โ | Aug 16, 2026 |
| 6 | ZS Salovnova | Thegentlemen | โ | Aug 7, 2026 |
| 7 | Ceska filharmonie | Thegentlemen | Other | Jul 23, 2026 |
| 8 | Novasport s.r.o. | Akira | Consumer Services | Jul 21, 2026 |
| 9 | Novasport s.r.o. | Akira | Consumer Services | Jul 21, 2026 |
| 10 | www.lagus.cz | Krybit | Business Services | Jul 17, 2026 |
| 11 | Mesto Celakovice | Thegentlemen | Manufacturing | Jul 16, 2026 |
| 12 | Cooperate consulting CZ s.r.o. | Titan | Business Services | Jul 13, 2026 |
| 13 | DataOstrov s.r.o. | Titan | Technology | Jul 13, 2026 |
| 14 | Jakub A.S. | Qilin | Manufacturing | Jul 13, 2026 |
| 15 | Ozmit s.r.o. | Titan | โ | Jul 13, 2026 |
| 16 | Cooperate service CZ s.r.o. | Titan | Business Services | Jul 12, 2026 |
| 17 | Energon | Thegentlemen | Energy | Jul 11, 2026 |
| 18 | FIRESTA | Deadlock | Manufacturing | Jul 10, 2026 |
| 19 | ลฝidlochovice city | Deadlock | Public Sector | Jul 10, 2026 |
| 20 | Muzeum Valassko | Deadlock | Hospitality and Tourism | Jul 10, 2026 |
| 21 | Next Clinics | Qilin | Healthcare | Jul 7, 2026 |
| 22 | BDS CZ | Thegentlemen | Business Services | Jul 1, 2026 |
| 23 | Beran Concrete | Thegentlemen | Construction | Jul 1, 2026 |
| 24 | EMAS Group | Thegentlemen | Energy | Jul 1, 2026 |
| 25 | Axionlog | Qilin | Technology | Jun 29, 2026 |
| 26 | FIZA | Incransom | Manufacturing | Jun 10, 2026 |
| 27 | ExpoCredit | Qilin | Financial Services | May 24, 2026 |
| 28 | Cz Collections | Qilin | Consumer Services | May 20, 2026 |
| 29 | University of Finance and Administration | Thegentlemen | Education | May 18, 2026 |
| 30 | mesto-jemnice.cz | Lockbit5 | Public Sector | Apr 14, 2026 |
| 31 | zsfh.cz | Lockbit5 | Education | Apr 14, 2026 |
| 32 | Envy Recycling | Gunra | Manufacturing | Apr 8, 2026 |
| 33 | Zamek Namest | Thegentlemen | Hospitality and Tourism | Apr 4, 2026 |
| 34 | Transgas | Qilin | Energy | Mar 26, 2026 |
| 35 | Motorpal | Akira | Manufacturing | Mar 20, 2026 |
| 36 | Economia | Thegentlemen | Business Services | Mar 18, 2026 |
| 37 | Kabelovna Kabex | Thegentlemen | Telecommunication | Mar 16, 2026 |
| 38 | Pilana Group, TRITCON | Akira | Manufacturing | Mar 16, 2026 |
| 39 | Vera, spool. s.r.o. | Nightspire | โ | Feb 25, 2026 |
| 40 | kres.cz | Safepay | Consumer Services | Feb 7, 2026 |
| 41 | Garko | Thegentlemen | Consumer Services | Jan 21, 2026 |
| 42 | Orlรญk Compressors | Thegentlemen | Manufacturing | Jan 20, 2026 |
| 43 | d-klima.cz | Lockbit5 | Construction | Dec 26, 2025 |
| 44 | kraslice.cz | Lockbit5 | Public Sector | Dec 26, 2025 |
| 45 | zszeleznice.cz | Lockbit5 | Transportation/Logistics | Dec 26, 2025 |
| 46 | Znojma Czechia | Incransom | Public Sector | Nov 12, 2025 |
| 47 | atg.cz | Warlock | Technology | Nov 6, 2025 |
| 48 | Wassa, SRO | Qilin | Business Services | Oct 19, 2025 |
| 49 | DBK Partners | Incransom | Business Services | Sep 14, 2025 |
| 50 | CIMEXSTEEL.CZ | Qilin | Manufacturing | Aug 8, 2025 |
| 51 | ACMARK | Beast | Manufacturing | Jul 29, 2025 |
| 52 | event-medical.com | Teamxxx | Healthcare | Jun 10, 2025 |
| 53 | kosmas.cz | Lynx | Technology | May 28, 2025 |
| 54 | gjszlin.cz | Safepay | Business Services | May 26, 2025 |
| 55 | Grafton Technologies | Play | Telecommunication | May 14, 2025 |
| 56 | Nedved Architekti | Spacebears | Construction | May 12, 2025 |
| 57 | Synthesia.com | Imncrew | Technology | May 5, 2025 |
| 58 | csspv | Nightspire | Public Sector | Apr 28, 2025 |
| 59 | govcz | Qilin | Public Sector | Apr 28, 2025 |
| 60 | HOPI | Hunters | โ | Apr 17, 2025 |
| 61 | Sprรกva sluลพeb hlavnรญho mฤsta Prahy | Cicada3301 | Public Sector | Apr 10, 2025 |
| 62 | TEDOM | Hunters | Manufacturing | Apr 5, 2025 |
| 63 | HYPONAMIRU | Arcusmedia | โ | Mar 12, 2025 |
| 64 | CIE | Fog | Technology | Mar 6, 2025 |
| 65 | Mervis.info | Flocker | Technology | Feb 16, 2025 |
| 66 | Spacemanic | Fog | Technology | Feb 12, 2025 |
| 67 | swissit.cz | Akira | Technology | Jan 31, 2025 |
| 68 | Aquasys | Dragonforce | Construction | Jan 27, 2025 |
| 69 | Moraviakov s.r.o. | 8base | Manufacturing | Jan 14, 2025 |
| 70 | wikov.com | Blackbasta | Manufacturing | Dec 18, 2024 |
| 71 | synoveboure.wz.cz | Dragonransomware | โ | Dec 15, 2024 |
| 72 | Conteg | Hunters | Technology | Dec 3, 2024 |
| 73 | Praลพskรฉ sluลพby | Akira | Public Sector | Nov 29, 2024 |
| 74 | borohradek | Incransom | โ | Nov 25, 2024 |
| 75 | qualiform.cz | Helldown | Manufacturing | Nov 6, 2024 |
| 76 | [File Tree and Full Data Dump]VOP CZ | Ransomhouse | Public Sector | Oct 28, 2024 |
| 77 | SWISS CZ | Akira | Technology | Sep 5, 2024 |
| 78 | VOP CZ | Ransomhouse | Manufacturing | Sep 3, 2024 |
| 79 | PER4MANCE | Dragonforce | Technology | Aug 18, 2024 |
| 80 | CertiCon | Dragonforce | Technology | Jul 25, 2024 |
| 81 | ZSZAALEJI.cz | Qilin | Education | Jul 17, 2024 |
| 82 | IZOMAT Praha | Akira | Business Services | May 22, 2024 |
| 83 | ALO diamonds | 8base | Business Services | May 21, 2024 |
| 84 | dpkv.cz | Lockbit3 | Transportation/Logistics | May 9, 2024 |
| 85 | www.credio.eu | Apt73 | Financial Services | May 2, 2024 |
| 86 | STERCH - INTERNATIONAL s.r.o. | Ransomhouse | Manufacturing | Apr 24, 2024 |
| 87 | CHOCOTOPIA | Donex | Agriculture and Food Production | Mar 8, 2024 |
Frequently Asked Questions
How many ransomware attacks have occurred in Czech Republic?
Czech Republic has recorded 87 ransomware victim disclosures in this database, ranking #33 globally. This represents 0.4% of all tracked ransomware attacks worldwide.
Which ransomware groups target Czech Republic?
The ransomware groups most active in Czech Republic are Thegentlemen, Qilin, Akira, Lockbit5. These groups collectively account for the majority of victim disclosures attributed to Czech Republic.
Which industries are most targeted by ransomware in Czech Republic?
In Czech Republic, the most frequently targeted sectors are Manufacturing, Technology, Business Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does Czech Republic rank globally for ransomware attacks?
Czech Republic ranks #33 globally for ransomware attacks with 87 victim disclosures, representing 0.4% of the worldwide total of 21,374 tracked victims.
How can organisations in Czech Republic protect against ransomware?
Organisations in Czech Republic should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Czech Republic is also recommended.