Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
EC

Ransomware attacks in Ecuador

32 organisations in Ecuador have been listed on ransomware leak sites, ranking #50 worldwide. Updated .

Victims
32
0.1% of global total
Global rank
#50
of 180 countries
Active groups
22
Most: Thegentlemen
Sectors
13
Most: Agriculture and Food Production

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Ecuador. Figures are computed from the tracked records, not inferred.

Ecuador experiences 32 recorded ransomware attacks globally ranking 50th, most active groups targeting agriculture and hospitality sectors.

Ecuador in the global picture

Ecuador accounts for 32 of the ransomware disclosures tracked here, ranking #50 worldwide and making up 0.1% of the global total. The sectors listed most often are Agriculture and Food Production, Hospitality, Public Sector.

Who is most active in Ecuador

Thegentlemen — 4 victims in Ecuador. Qilin — 4 victims in Ecuador. Qilin ransomware was first observed in July of 2022. Vexy ransomware — 3 victims in Ecuador.

Ransomware threat profile: Ecuador

Ecuador ranks #50 worldwide for ransomware disclosures, with 32 victims in this database — 0.1% of the global total. The groups listing the most organisations here are Thegentlemen, Qilin and Vexy ransomware.

The most frequently listed industries in Ecuador are Agriculture and Food Production, Hospitality, Public Sector. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Ecuador's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Ecuador 32

Organization Disclosed
Ecuadors National Police
Thegentlemen
Ecuador police headquarters
Hyflock
ConAuto
Qilin
Automovil Club del Ecuador ANETA
Barracuda
McDonalds Ecuador
Vexy ransomware
McDonald's Ecuador
Vexy ransomware
McDonald's Ecuador
Vexy ransomware
galmack.com.ec
Settra
Indian Motos Inmot
Qilin
Asisken
Wallstreet
Grupo Pasquel
Thegentlemen
El Ordeno
Thegentlemen
Superintendency of territorial planning
Coinbasecartel
Mutualista Imbabura
Vect
https://comercialautomotriz.com
Tengu
Ecuacorriente S.A.
Thegentlemen
sipecom.com
Warlock
Hotam EC
Handala
Comelesa
Nightspire
Universidad Técnica del Norte Ecuador
Incransom
Cacspmec
Qilin
tecnologias.mspz2.gob.ec
Babuk2
Bayteq
Fog
www.elecgalapagos.com.ec
Ransomhub
saludsa.com.ec
Akira
biodimed.com
Stormous
frigopesca.com.ec
Ransomhub
Xtrim TVCable
Akira
todoagro
Spacebears
quifatex.com
Dispossessor
GRUPOCREATIVO HERRERA
Qilin
isspol.gov
Lockbit3

Frequently asked questions

How many ransomware attacks have occurred in Ecuador?

Ecuador has recorded 32 ransomware victim disclosures in this database, ranking #50 globally. This represents 0.1% of all tracked ransomware attacks worldwide.

Which ransomware groups target Ecuador?

The ransomware groups most active in Ecuador are Thegentlemen, Qilin, Vexy ransomware, Ransomhub. These groups collectively account for the majority of victim disclosures attributed to Ecuador.

Which industries are most targeted by ransomware in Ecuador?

In Ecuador, the most frequently targeted sectors are Agriculture and Food Production, Hospitality, Public Sector. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Ecuador rank globally for ransomware attacks?

Ecuador ranks #50 globally for ransomware attacks with 32 victim disclosures, representing 0.1% of the worldwide total of 23,596 tracked victims.

How can organisations in Ecuador protect against ransomware?

Organisations in Ecuador should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Ecuador is also recommended.