Greece
GRRansomware victim intelligence profile ยท Ranked #46 globally ยท Updated: Sep 6, 2026
ThreatAI Analysis
Compiled from this database and the ransomware.live profiles of the groups active in Greece. Figures are computed from the tracked records, not inferred.
Greece sees 45 recorded ransomware attacks globally ranked 46th in activity with Akira, Qilin, Thegentlemen being most active groups targeting Transportation/Logistics, Technology, Business Services sectors primarily.
Greece in the global picture
Greece accounts for 45 of the ransomware disclosures tracked here, ranking #46 worldwide and making up 0.2% of the global total. The sectors listed most often are Transportation/Logistics, Technology, Business Services.
Who is most active in Greece
Akira โ 6 victims in Greece. The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. Qilin โ 4 victims in Greece. Qilin ransomware was first observed in July of 2022. Thegentlemen โ 3 victims in Greece.
Ransomware Threat Profile: Greece
Greece ranks #46 globally for ransomware attacks, with 45 confirmed victims in this database โ representing 0.2% of the worldwide total. The most active ransomware groups targeting Greece include Akira, Qilin, Thegentlemen.
The most frequently targeted industries in Greece are Transportation/Logistics, Technology, Business Services. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
Greece's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in Greece should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in Greece (showing 45 of 45)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | grecosteel.com | Settra | Manufacturing | Aug 19, 2026 |
| 2 | EKEPIS | Thegentlemen | โ | Aug 14, 2026 |
| 3 | MACOFIN HELLAS S.A. | Global secret group | Financial Services | Aug 10, 2026 |
| 4 | OTEGROUP | Blacknevas | Other | Aug 7, 2026 |
| 5 | BDO Greece | Thegentlemen | Business Services | Jul 11, 2026 |
| 6 | ISOPLUS | Qilin | Business Services | Jun 25, 2026 |
| 7 | Primius Law Firm | Dragonforce | Business Services | Apr 22, 2026 |
| 8 | VLawyers | Incransom | Business Services | Apr 2, 2026 |
| 9 | IASMOS | Nightspire | โ | Mar 21, 2026 |
| 10 | Unibros Shipping | Qilin | Transportation/Logistics | Feb 28, 2026 |
| 11 | www.pyramisgroup.com | Alphalocker | Financial Services | Feb 28, 2026 |
| 12 | SATO | Thegentlemen | Technology | Feb 25, 2026 |
| 13 | goldair.gr | Incransom | Transportation/Logistics | Jan 23, 2026 |
| 14 | Revoil | Obscura | Energy | Jan 11, 2026 |
| 15 | inttrust.gr | Safepay | Technology | Dec 14, 2025 |
| 16 | Vlp Hellas | Qilin | โ | Dec 14, 2025 |
| 17 | Twinsoft | Coinbasecartel | Technology | Dec 12, 2025 |
| 18 | FDB Collections | Killsec | โ | Sep 22, 2025 |
| 19 | DLCOSMETICS O.E. | Ransomhouse | Consumer Services | Aug 25, 2025 |
| 20 | EUROFILM ฮฮฮฮคฮฮฮกฮฮฃ ฮ.ฮ | Incransom | Consumer Services | Aug 20, 2025 |
| 21 | TOP Ships | Akira | Transportation/Logistics | Aug 11, 2025 |
| 22 | Geomaticks Grecia | Global | Business Services | Jul 26, 2025 |
| 23 | avgouleaschool.gr | Safepay | Education | Jul 7, 2025 |
| 24 | Vยฒ Development | Datacarry | Construction | Jun 4, 2025 |
| 25 | TOP Ships Inc., Stock Symbol TOPS | Akira | Transportation/Logistics | May 27, 2025 |
| 26 | TBD GREECE | Devman | โ | May 19, 2025 |
| 27 | Akantha | Blacklock | Technology | May 16, 2025 |
| 28 | Franman | Akira | Transportation/Logistics | May 14, 2025 |
| 29 | Anfarm Hellas | Akira | Healthcare | Apr 16, 2025 |
| 30 | Hellenic Airforce | Babuk2 | Public Sector | Apr 3, 2025 |
| 31 | SEA-JET.COM | Clop | Transportation/Logistics | Feb 27, 2025 |
| 32 | P.N. Sakkoulas | Akira | Business Services | Feb 17, 2025 |
| 33 | BEINOGLOU.GR | Clop | Transportation/Logistics | Feb 10, 2025 |
| 34 | mindev.gov.gr | Funksec | Public Sector | Jan 9, 2025 |
| 35 | nigico.gr | Ransomhub | Technology | Dec 28, 2024 |
| 36 | Cognity (cognity.gr) | Fog | Technology | Dec 16, 2024 |
| 37 | nedamaritime.gr | Blackout | Transportation/Logistics | Dec 10, 2024 |
| 38 | Ilvief | Akira | Energy | Nov 29, 2024 |
| 39 | Hronopoulos | Qilin | Telecommunication | Nov 21, 2024 |
| 40 | eap.gr | Ransomhub | Education | Nov 1, 2024 |
| 41 | Eurobulk | Play | Transportation/Logistics | Sep 23, 2024 |
| 42 | antaeustravel.com | Blackout | Hospitality and Tourism | Aug 22, 2024 |
| 43 | kronospublic.com | Lockbit3 | Technology | Aug 10, 2024 |
| 44 | barkingwell.gr | Lockbit3 | Technology | Jul 19, 2024 |
| 45 | iteam.gr | Lockbit3 | Technology | Jul 19, 2024 |
Frequently Asked Questions
How many ransomware attacks have occurred in Greece?
Greece has recorded 45 ransomware victim disclosures in this database, ranking #46 globally. This represents 0.2% of all tracked ransomware attacks worldwide.
Which ransomware groups target Greece?
The ransomware groups most active in Greece are Akira, Qilin, Thegentlemen, Incransom. These groups collectively account for the majority of victim disclosures attributed to Greece.
Which industries are most targeted by ransomware in Greece?
In Greece, the most frequently targeted sectors are Transportation/Logistics, Technology, Business Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does Greece rank globally for ransomware attacks?
Greece ranks #46 globally for ransomware attacks with 45 victim disclosures, representing 0.2% of the worldwide total of 21,388 tracked victims.
How can organisations in Greece protect against ransomware?
Organisations in Greece should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Greece is also recommended.