Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
CZ

Ransomware attacks in Czech Republic

97 organisations in Czech Republic have been listed on ransomware leak sites, ranking #33 worldwide. Updated .

Victims
97
0.4% of global total
Global rank
#33
of 180 countries
Active groups
37
Most: Thegentlemen
Sectors
17
Most: Technology

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Czech Republic. Figures are computed from the tracked records, not inferred.

97 ransomware attacks have been recorded against the Czech Republic, placing it globally at 33; cyber threats from groups like Thegentlemen and Qilin disproportionately target tech and manufacturing sectors there.

Czech Republic in the global picture

Czech Republic accounts for 97 of the ransomware disclosures tracked here, ranking #33 worldwide and making up 0.4% of the global total. The sectors listed most often are Technology, Manufacturing, Business Services.

Who is most active in Czech Republic

Thegentlemen — 15 victims in Czech Republic. Qilin — 10 victims in Czech Republic. Qilin ransomware was first observed in July of 2022. Akira — 8 victims in Czech Republic. The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group.

Where to report an incident in Czech Republic

National computer emergency response teams for Czech Republic, as registered with ENISA and the teams themselves. Regional, sectoral and vendor response teams are excluded; verify current contact details before relying on them in an incident.

Ransomware threat profile: Czech Republic

Czech Republic ranks #33 worldwide for ransomware disclosures, with 97 victims in this database — 0.4% of the global total. The groups listing the most organisations here are Thegentlemen, Qilin and Akira.

The most frequently listed industries in Czech Republic are Technology, Manufacturing, Business Services. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Czech Republic's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Czech Republic 97

Organization Disclosed
Sladek Partners
Thegentlemen
Machine sro
Thegentlemen
dd-automation.ch
Safepay
www.kres.cz
Krybit
sumperk.cz
Safepay
PALIG.COM
Clop
Seznam
Medusalocker
Seznam
Medusalocker
SEVENOAKS s.r.o.
Emperador
SEVENOAKS s.r.o.
Emperador
kdynium.cz
Zawoo
dece.cz
Lockbit5
Freelom
Spacebears
www.mestojilemnice.cz
Krybit
SAGASTA sro
Panzer
ZS Salovnova
Thegentlemen
Ceska filharmonie
Thegentlemen
Novasport s.r.o.
Akira
Novasport s.r.o.
Akira
www.lagus.cz
Krybit
Mesto Celakovice
Thegentlemen
Cooperate consulting CZ s.r.o.
Titan
DataOstrov s.r.o.
Titan
Jakub A.S.
Qilin
Ozmit s.r.o.
Titan
Cooperate service CZ s.r.o.
Titan
Energon
Thegentlemen
FIRESTA
Deadlock
Židlochovice city
Deadlock
Muzeum Valassko
Deadlock
Next Clinics
Qilin
BDS CZ
Thegentlemen
Beran Concrete
Thegentlemen
EMAS Group
Thegentlemen
Axionlog
Qilin
FIZA
Incransom
ExpoCredit
Qilin
Cz Collections
Qilin
University of Finance and Administration
Thegentlemen
mesto-jemnice.cz
Lockbit5
zsfh.cz
Lockbit5
Envy Recycling
Gunra
Zamek Namest
Thegentlemen
Transgas
Qilin
Motorpal
Akira
Economia
Thegentlemen
Kabelovna Kabex
Thegentlemen
Pilana Group, TRITCON
Akira
Vera, spool. s.r.o.
Nightspire
kres.cz
Safepay
Garko
Thegentlemen
Orlík Compressors
Thegentlemen
d-klima.cz
Lockbit5
kraslice.cz
Lockbit5
zszeleznice.cz
Lockbit5
Znojma Czechia
Incransom
atg.cz
Warlock
Wassa, SRO
Qilin
DBK Partners
Incransom
CIMEXSTEEL.CZ
Qilin
ACMARK
Beast
event-medical.com
Teamxxx
kosmas.cz
Lynx
gjszlin.cz
Safepay
Grafton Technologies
Play
Nedved Architekti
Spacebears
Synthesia.com
Imncrew
csspv
Nightspire
govcz
Qilin
HOPI
Hunters
Správa služeb hlavního města Prahy
Cicada3301
TEDOM
Hunters
HYPONAMIRU
Arcusmedia
CIE
Fog
Mervis.info
Flocker
Spacemanic
Fog
swissit.cz
Akira
Aquasys
Dragonforce
Moraviakov s.r.o.
8base
wikov.com
Blackbasta
synoveboure.wz.cz
Dragonransomware
Conteg
Hunters
Pražské služby
Akira
borohradek
Incransom
qualiform.cz
Helldown
[File Tree and Full Data Dump]VOP CZ
Ransomhouse
SWISS CZ
Akira
VOP CZ
Ransomhouse
PER4MANCE
Dragonforce
CertiCon
Dragonforce
ZSZAALEJI.cz
Qilin
IZOMAT Praha
Akira
ALO diamonds
8base
dpkv.cz
Lockbit3
www.credio.eu
Apt73
STERCH - INTERNATIONAL s.r.o.
Ransomhouse
CHOCOTOPIA
Donex

Frequently asked questions

How many ransomware attacks have occurred in Czech Republic?

Czech Republic has recorded 97 ransomware victim disclosures in this database, ranking #33 globally. This represents 0.4% of all tracked ransomware attacks worldwide.

Which ransomware groups target Czech Republic?

The ransomware groups most active in Czech Republic are Thegentlemen, Qilin, Akira, Lockbit5. These groups collectively account for the majority of victim disclosures attributed to Czech Republic.

Which industries are most targeted by ransomware in Czech Republic?

In Czech Republic, the most frequently targeted sectors are Technology, Manufacturing, Business Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Czech Republic rank globally for ransomware attacks?

Czech Republic ranks #33 globally for ransomware attacks with 97 victim disclosures, representing 0.4% of the worldwide total of 23,585 tracked victims.

How can organisations in Czech Republic protect against ransomware?

Organisations in Czech Republic should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Czech Republic is also recommended.