Skip to content
CTI Academy Sponsor CTI Academy
EG

Ransomware attacks in Egypt

72 organisations in Egypt have been listed on ransomware leak sites, ranking #40 worldwide. Updated .

Victims
72
0.3% of global total
Global rank
#40
of 180 countries
Active groups
34
Most: Nightspire
Sectors
15
Most: Healthcare

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Egypt. Figures are computed from the tracked records, not inferred.

Egypt has seen ransomware activity recorded against 72 targets globally ranked 40th for susceptibility. The highest-activity groups linked thus far are Nightspire, Thegentlemen and Funksec, attacking sectors healthcare, technology and construction.

Egypt in the global picture

Egypt accounts for 72 of the ransomware disclosures tracked here, ranking #40 worldwide and making up 0.3% of the global total. The sectors listed most often are Healthcare, Technology, Construction.

Who is most active in Egypt

Nightspire — 9 victims in Egypt. Thegentlemen — 8 victims in Egypt. Funksec — 5 victims in Egypt.

Where to report an incident in Egypt

National computer emergency response teams for Egypt, as registered with ENISA and the teams themselves. Regional, sectoral and vendor response teams are excluded; verify current contact details before relying on them in an incident.

Ransomware threat profile: Egypt

Egypt ranks #40 worldwide for ransomware disclosures, with 72 victims in this database — 0.3% of the global total. The groups listing the most organisations here are Nightspire, Thegentlemen and Funksec.

The most frequently listed industries in Egypt are Healthcare, Technology, Construction. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Egypt's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Egypt 72

Organization Disclosed
Telecom Egypt
N0n
Company #70
N0n
lcww.com.eg
Lockbit5
Helwan University (HITU)
Umbra
FSE, Cairo University
Umbra
Royal EGT
Nightspire
Beni Suef Technological University – BTU
Umbra
Nile Projects Trading
Thegentlemen
Nile Projects Trading
Thegentlemen
ADG Healthcare
Orova
nilepet.com
Krybit
Sinai Grand Casino
Dragonforce
EBNY Development
Thegentlemen
Great Foods
Lamashtu
Sheraton Miramar Resort El Gouna
Nightspire
basatamfi
Nightspire
Papa John's Egypt
Nightspire
Rawaj Consumer Finance
Nightspire
Misr Chemical Industries
Thegentlemen
rhactushotel.com
Lockbit5
Luna Group
Lamashtu
EEC Group
Thegentlemen
orientalweavers.com
Payload
gas.mercedes-benz.com.eg
Lockbit5
ACE Consulting Engineers
Thegentlemen
AUG Pharma
Dragonforce
United Finance Egypt
Payload
INTERACT TECHNOLOGY SOLUTIONS
Pear
Rowad Modern Engineering
Crypto24
pay***
Vect
moa.gov.eg
Lockbit5
sodic.com
Payload
Nile Air Information
Thegentlemen
Smart Glass
Thegentlemen
ECOBAT EGYPT
The green blood group
ELKAIR.COM
Clop
Arkan
Ransomhouse
3S Software (Secured Smart Systems Overview Metrics)
Dragonforce
Arabia Holding
Qilin
LAMAICA, Egypt
Nightspire
SAMCRETE.COM
Clop
ELSEWEDYELECTRIC.COM
Clop
Al Ahly Leasing & Factoring Company
Blackshrantac
meamargroup.com
Obscura
MeamarGroup
Obscura
eehc.gov.eg
Devman
Future Association for Microfinance
Nightspire
Dar Al Teb
Gunra
INI Investments
Nightspire
Tawasol
Devman
International Busines Service
Crypto24
IACC Holdings
Dragonforce
MISR AL MAHABA HOSPITAL
Nightspire
isee-eg.com
Funksec
Shaghalni
Killsec
SPEED Co
Hunters
X-lab group
Fog
www.fgse.cu.edu.eg
Gdlockersec
mts.gov.eg
Funksec
Sharm Reef Hotel
Spacebears
gags.gov.eg
Funksec
egyptair.com 5 sell
Funksec
egyptair.com 5 with 10K !
Funksec
The Egyptian Tax Authority (ETA)
Moneymessage
Value Dental Center
Everest
Matouk Bassiouny
Raworld
Labib Funk Associates
Nitrogen
assih.com
Lockbit3
elarabygroup.com
Lockbit3
Power Generation Engineering and Services Company (PGESCo) - pgesco.com
Ransomhub
elezabypharmacy.com
Lockbit3
ArpuPlus
Medusa

Frequently asked questions

How many ransomware attacks have occurred in Egypt?

Egypt has recorded 72 ransomware victim disclosures in this database, ranking #40 globally. This represents 0.3% of all tracked ransomware attacks worldwide.

Which ransomware groups target Egypt?

The ransomware groups most active in Egypt are Nightspire, Thegentlemen, Funksec, Lockbit5. These groups collectively account for the majority of victim disclosures attributed to Egypt.

Which industries are most targeted by ransomware in Egypt?

In Egypt, the most frequently targeted sectors are Healthcare, Technology, Construction. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Egypt rank globally for ransomware attacks?

Egypt ranks #40 globally for ransomware attacks with 72 victim disclosures, representing 0.3% of the worldwide total of 23,585 tracked victims.

How can organisations in Egypt protect against ransomware?

Organisations in Egypt should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Egypt is also recommended.