Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
GR

Ransomware attacks in Greece

50 organisations in Greece have been listed on ransomware leak sites, ranking #47 worldwide. Updated .

Victims
50
0.2% of global total
Global rank
#47
of 180 countries
Active groups
29
Most: Akira
Sectors
15
Most: Transportation/Logistics

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Greece. Figures are computed from the tracked records, not inferred.

Greece has seen ransomware activity recorded against 50 victims globally, ranking 47th in activity levels, and often plagued by attacks from groups like Akira, Thegentlemen, and Qilin, targeting sectors including Logistics, Technology, and Business Services.

Greece in the global picture

Greece accounts for 50 of the ransomware disclosures tracked here, ranking #47 worldwide and making up 0.2% of the global total. The sectors listed most often are Transportation/Logistics, Technology, Business Services.

Who is most active in Greece

Akira — 6 victims in Greece. The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. Thegentlemen — 5 victims in Greece. Qilin — 4 victims in Greece. Qilin ransomware was first observed in July of 2022.

Ransomware threat profile: Greece

Greece ranks #47 worldwide for ransomware disclosures, with 50 victims in this database — 0.2% of the global total. The groups listing the most organisations here are Akira, Thegentlemen and Qilin.

The most frequently listed industries in Greece are Transportation/Logistics, Technology, Business Services. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Greece's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Greece 50

Organization Disclosed
kordhotels.gr
Lockbit5
UNION FA
Deadlock
UNION FA
Deadlock
Agospap
Thegentlemen
Agospap
Thegentlemen
grecosteel.com
Settra
EKEPIS
Thegentlemen
MACOFIN HELLAS S.A.
Global secret group
OTEGROUP
Blacknevas
BDO Greece
Thegentlemen
ISOPLUS
Qilin
Primius Law Firm
Dragonforce
VLawyers
Incransom
IASMOS
Nightspire
Unibros Shipping
Qilin
www.pyramisgroup.com
Alphalocker
SATO
Thegentlemen
goldair.gr
Incransom
Revoil
Obscura
inttrust.gr
Safepay
Vlp Hellas
Qilin
Twinsoft
Coinbasecartel
FDB Collections
Killsec
DLCOSMETICS O.E.
Ransomhouse
EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε
Incransom
TOP Ships
Akira
Geomaticks Grecia
Global
avgouleaschool.gr
Safepay
V² Development
Datacarry
TOP Ships Inc., Stock Symbol TOPS
Akira
TBD GREECE
Devman
Akantha
Blacklock
Franman
Akira
Anfarm Hellas
Akira
Hellenic Airforce
Babuk2
SEA-JET.COM
Clop
P.N. Sakkoulas
Akira
BEINOGLOU.GR
Clop
mindev.gov.gr
Funksec
nigico.gr
Ransomhub
Cognity (cognity.gr)
Fog
nedamaritime.gr
Blackout
Ilvief
Akira
Hronopoulos
Qilin
eap.gr
Ransomhub
Eurobulk
Play
antaeustravel.com
Blackout
kronospublic.com
Lockbit3
barkingwell.gr
Lockbit3
iteam.gr
Lockbit3

Frequently asked questions

How many ransomware attacks have occurred in Greece?

Greece has recorded 50 ransomware victim disclosures in this database, ranking #47 globally. This represents 0.2% of all tracked ransomware attacks worldwide.

Which ransomware groups target Greece?

The ransomware groups most active in Greece are Akira, Thegentlemen, Qilin, Incransom. These groups collectively account for the majority of victim disclosures attributed to Greece.

Which industries are most targeted by ransomware in Greece?

In Greece, the most frequently targeted sectors are Transportation/Logistics, Technology, Business Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Greece rank globally for ransomware attacks?

Greece ranks #47 globally for ransomware attacks with 50 victim disclosures, representing 0.2% of the worldwide total of 23,590 tracked victims.

How can organisations in Greece protect against ransomware?

Organisations in Greece should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Greece is also recommended.