Skip to content
CTI Academy Sponsor CTI Academy
HK

Ransomware attacks in Hong Kong

108 organisations in Hong Kong have been listed on ransomware leak sites, ranking #32 worldwide. Updated .

Victims
108
0.5% of global total
Global rank
#32
of 180 countries
Active groups
38
Most: Qilin
Sectors
16
Most: Manufacturing

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Hong Kong. Figures are computed from the tracked records, not inferred.

Hong Kong experiences 108 recorded cases of ransomware annually, ranking 32nd globally; most active groups include Qilin, Orova, Dragonforce targeting manufacturing, technology, and financial services sectors.

Hong Kong in the global picture

Hong Kong accounts for 108 of the ransomware disclosures tracked here, ranking #32 worldwide and making up 0.5% of the global total. The sectors listed most often are Manufacturing, Technology, Financial Services.

Who is most active in Hong Kong

Qilin — 12 victims in Hong Kong. Qilin ransomware was first observed in July of 2022. Orova — 11 victims in Hong Kong. First seen 2026-07-07. Dragonforce — 11 victims in Hong Kong.

Ransomware threat profile: Hong Kong

Hong Kong ranks #32 worldwide for ransomware disclosures, with 108 victims in this database — 0.5% of the global total. The groups listing the most organisations here are Qilin, Orova and Dragonforce.

The most frequently listed industries in Hong Kong are Manufacturing, Technology, Financial Services. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Hong Kong's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Hong Kong 108

Page 1 of 2
Organization Disclosed
New Tec Tool Limited
Play
The Park Lane Hong Kong
Orova
Yusen Logistics Hong Kong (3PL logistics)
N0n
Great Bay Bio
Nightspire
M800 and CINNOX
Beast
Fu Sheng Industrial Co., Ltd
Orova
ITC Properties Group Limited
Orova
South Pacific Hotel Limited
Orova
DL HOLDINGS GROUP
Orova
www.hsi.info
Krybit
Ganzhou Xinye Craft Co., Ltd.
Orova
Hong Kong Baptist University
Thegentlemen
Chun Tai Sing Chemical Industry
Qilin
JK Capital Management Limited
Orova
Sanrio Hong Kong Co., Ltd
Orova
SSI HOLDING (FAR EAST) LIMITED
Orova
SURE TRAVEL COMPANY
Orova
Tat Fung Textile Co., Ltd.
Orova
Kee Wah Bakery
Dragonforce
Edison Global Networks Limited
Dragonforce
Pro-Tech Technology
Thegentlemen
on-us
Gunra
eternal.hk
Lockbit5
A. Liberty Engineering Co. Ltd
Dragonforce
Cheoy Lee Shipyards
Dragonforce
Hong Kong Parkview
Dragonforce
Goldlion
Thegentlemen
Ma Pak Leung Company Limited
Ransomhouse
Computime Group
Thegentlemen
nacs.com.hk
Krybit
Value Exchange International
Thegentlemen
Heng An Standard Life Insurance
Blacknevas
Travel Expert
Qilin
Playmates Toys
Coinbasecartel
shunhinggroup.com
Lockbit5
Frontier Financial Group
Gunra
NeoDerm
Gunra
Paid Victim CCD233FEE92FFA2D
Auditteam
CCCKeito.edu.hk
Krybit
GCA Professional
Thegentlemen
Golden GBC
Qilin
Shining Labels
Dragonforce
MEDIAWORLD.COM.HK
Clop
Novetex Textiles
Thegentlemen
Handsome Manufacturing
Thegentlemen
sitoy.com
Abyss
CLEARWAYGROUP.COM
Clop
Yumark Enterprises
Qilin
Ju Teng International Holdings Ltd
Incransom
InvivoGen HK
Sinobi
Labeltex Group
Akira
Bolttech.io
Everest
GPC Industries
Dragonforce
asiapacificex.com
Lockbit5
Pioneer Ocean Freight Co., Ltd.
Nightspire
renrns.com
Qilin
KONCISE COMPANY LIMITED
Nightspire
romar industrial company limited
Nightspire
OCI International Holdings
Ransomhouse
Perennial
Beast
Petraville Asset Management
Qilin
PTR Asset Management
Qilin
SUNIQUE Asset Management Co
Qilin
Majesty Asset Management Co.
Qilin
VANCHOR Asset Management
Qilin
Fullcolour.com Limited
Dragonforce
HK Hardware & Engineering
Lynx
Welcome Financial Group
Qilin
MITACHI (HK) COMPANY LIMITED
Direwolf
Hong Kong Victim
Devman
TBD HONG KONG
Devman
HKG Duty Free
Dragonforce
Premier 1888 Ltd.
Nightspire
aetoscapitalasia.com
Teamxxx
BTHK
Warlock
appotech
Qilin
Vinda Group
Ransomhouse
Fujipoly Hong Kong Ltd
Spacebears
TBD HONK KONG
Devman
maxusgroup.com
Safepay
dosjm.com
Safepay
Honk Kong Victim
Devman
6ixty8ight
Nightspire
Far East Consortium
Nightspire
Waihong Environmental Services Limited
Nightspire
Far East Consortium International Limited
Nightspire
www.hexosys.com
Ransomhub
HANSONFASO.COM
Clop
PACIFIC-TEXTILE.COM
Clop
BSIEDI.COM
Clop
The Pawn
Akira
www.shihka.com.hk
Gdlockersec
sdkgroup.com
Ransomhub
kingpower.com
Abyss
espri#####
Clop
Modern Dental Group Limited
Braincipher
xui.one
Funksec
Mobigator Technology Group
Dragonforce
MENZIES CNAC (Jardine Aviation Services, Agility)
Spacebears
VALLEYFIRM
Helldown

Frequently asked questions

How many ransomware attacks have occurred in Hong Kong?

Hong Kong has recorded 108 ransomware victim disclosures in this database, ranking #32 globally. This represents 0.5% of all tracked ransomware attacks worldwide.

Which ransomware groups target Hong Kong?

The ransomware groups most active in Hong Kong are Qilin, Orova, Dragonforce, Nightspire. These groups collectively account for the majority of victim disclosures attributed to Hong Kong.

Which industries are most targeted by ransomware in Hong Kong?

In Hong Kong, the most frequently targeted sectors are Manufacturing, Technology, Financial Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Hong Kong rank globally for ransomware attacks?

Hong Kong ranks #32 globally for ransomware attacks with 108 victim disclosures, representing 0.5% of the worldwide total of 23,582 tracked victims.

How can organisations in Hong Kong protect against ransomware?

Organisations in Hong Kong should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Hong Kong is also recommended.