Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
IS

Ransomware attacks in Iceland

6 organisations in Iceland have been listed on ransomware leak sites, ranking #107 worldwide. Updated .

Victims
6
0% of global total
Global rank
#107
of 185 countries
Active groups
5
Most: Thegentlemen
Sectors
4
Most: Business Services

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Iceland. Figures are computed from the tracked records, not inferred.

Iceland in the global picture

Iceland accounts for 6 of the ransomware disclosures tracked here, ranking #107 worldwide and making up 0% of the global total. The sectors listed most often are Business Services, Technology, Agriculture and Food Production.

Who is most active in Iceland

Thegentlemen — 2 victims in Iceland. Warlock — 1 victims in Iceland. The Warlock ransomware and operator(s) are believed to be attributed to Storm-2603, a China-based threat actor who is also known to have deployed LockBit ransomware. Lockbit3 — 1 victims in Iceland.

Ransomware threat profile: Iceland

Iceland ranks #107 worldwide for ransomware disclosures, with 6 victims in this database — 0% of the global total. The groups listing the most organisations here are Thegentlemen, Warlock and Lockbit3.

The most frequently listed industries in Iceland are Business Services, Technology, Agriculture and Food Production. Manufacturing is an attractive target because production downtime turns directly into lost revenue.

The volume reflects Iceland's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Iceland 6

Organization Disclosed
Known
Thegentlemen
Farmers Association of Iceland
Thegentlemen
miltech.local
Warlock
vikurverk.is
Lockbit3
Karvo Companies, Inc.
Bianlian
https://www.gadotbio.com/ Gadot Biochemical Industries Ltd
Alphalocker

Frequently asked questions

How many ransomware attacks have occurred in Iceland?

Iceland has recorded 6 ransomware victim disclosures in this database, ranking #107 globally. This represents 0% of all tracked ransomware attacks worldwide.

Which ransomware groups target Iceland?

The ransomware groups most active in Iceland are Thegentlemen, Warlock, Lockbit3, Bianlian. These groups collectively account for the majority of victim disclosures attributed to Iceland.

Which industries are most targeted by ransomware in Iceland?

In Iceland, the most frequently targeted sectors are Business Services, Technology, Agriculture and Food Production. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Iceland rank globally for ransomware attacks?

Iceland ranks #107 globally for ransomware attacks with 6 victim disclosures, representing 0% of the worldwide total of 24,195 tracked victims.

How can organisations in Iceland protect against ransomware?

Organisations in Iceland should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Iceland is also recommended.