Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
JO

Ransomware attacks in Jordan

19 organisations in Jordan have been listed on ransomware leak sites, ranking #69 worldwide. Updated .

Victims
19
0.1% of global total
Global rank
#69
of 181 countries
Active groups
15
Most: Lockbit5
Sectors
10
Most: Public Sector

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Jordan. Figures are computed from the tracked records, not inferred.

Jordan sees ransomware activity recorded against 19 victims, globally ranking 69th; Lockbit5, Qilin, Everest dominate as groups, with Public Sector, Technology, Agriculture and Food Production hit hardest.

Jordan in the global picture

Jordan accounts for 19 of the ransomware disclosures tracked here, ranking #69 worldwide and making up 0.1% of the global total. The sectors listed most often are Public Sector, Technology, Agriculture and Food Production.

Who is most active in Jordan

Lockbit5 — 2 victims in Jordan. Qilin — 2 victims in Jordan. Qilin ransomware was first observed in July of 2022. Everest — 2 victims in Jordan. Everest ransom group collects and analyzes information about their victims.

Ransomware threat profile: Jordan

Jordan ranks #69 worldwide for ransomware disclosures, with 19 victims in this database — 0.1% of the global total. The groups listing the most organisations here are Lockbit5, Qilin and Everest.

The most frequently listed industries in Jordan are Public Sector, Technology, Agriculture and Food Production. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Jordan's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Jordan 19

Organization Disclosed
jshotels.com
Lockbit5
Jordan India Fertilizer Company
Netrunner
itgsolutions.com
Lockbit5
Integrated Technology Group
Qilin
Abdulhadi Hospital
Devman
tagorg.com
Warlock
www.afmco.jo
Qilin
Jordan Kuwait Bank - Full leak published
Everest
UnigazJordan
Medusalocker
Jordan Kuwait Bank
Everest
Eagle Distilleries
Cicada3301
carc.gov.jo
Babuk2
carc.gov.jo
Funksec
rscn.org.jo
Funksec
Trust Seeds
Arcusmedia
wexfordcounty.org
Embargo
Ministry of Education - Jordan
Hellcat
ETC Companies
Akira
bshsoft.com
Eldorado

Frequently asked questions

How many ransomware attacks have occurred in Jordan?

Jordan has recorded 19 ransomware victim disclosures in this database, ranking #69 globally. This represents 0.1% of all tracked ransomware attacks worldwide.

Which ransomware groups target Jordan?

The ransomware groups most active in Jordan are Lockbit5, Qilin, Everest, Funksec. These groups collectively account for the majority of victim disclosures attributed to Jordan.

Which industries are most targeted by ransomware in Jordan?

In Jordan, the most frequently targeted sectors are Public Sector, Technology, Agriculture and Food Production. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Jordan rank globally for ransomware attacks?

Jordan ranks #69 globally for ransomware attacks with 19 victim disclosures, representing 0.1% of the worldwide total of 23,671 tracked victims.

How can organisations in Jordan protect against ransomware?

Organisations in Jordan should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Jordan is also recommended.