Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
KW

Ransomware attacks in Kuwait

15 organisations in Kuwait have been listed on ransomware leak sites, ranking #76 worldwide. Updated .

Victims
15
0.1% of global total
Global rank
#76
of 181 countries
Active groups
13
Most: Lockbit5
Sectors
11
Most: Business Services

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Kuwait. Figures are computed from the tracked records, not inferred.

Kuwait's ransomware activity as recorded shows 15 attacks making it to victims' lists, ranking 75th globally in terms of such activity, with Lockbit5 and Clop among the most active groups, and businesses within Hospitality and Tourism sectors hit frequently.

Kuwait in the global picture

Kuwait accounts for 15 of the ransomware disclosures tracked here, ranking #76 worldwide and making up 0.1% of the global total. The sectors listed most often are Business Services, Hospitality and Tourism, Telecommunication.

Who is most active in Kuwait

Lockbit5 — 2 victims in Kuwait. Clop — 2 victims in Kuwait. The ransomware group known as Cl0p is a variant of a previously known strain dubbed CryptoMix. N0n — 1 victims in Kuwait.

Ransomware threat profile: Kuwait

Kuwait ranks #76 worldwide for ransomware disclosures, with 15 victims in this database — 0.1% of the global total. The groups listing the most organisations here are Lockbit5, Clop and N0n.

The most frequently listed industries in Kuwait are Business Services, Hospitality and Tourism, Telecommunication. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects Kuwait's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Kuwait 15

Organization Disclosed
GCS Kuwait (port community system operations)
N0n
Kuwait Ministry Of Interior !
Nasirsecurity
Sidra Kuwait Hospital
Everest
ssskwt.com
Lockbit5
utc.com.kw
Lockbit5
LaBaguette
Qilin
ALSHAYA.COM
Clop
ZAIN.COM
Clop
Fouad Alghanim & Sons Group of Companies Holding W.L.L.
Radar
Kuwait Portland Cement
Thegentlemen
www.mada.com.kw
Kraken
The Green Flame Gas Co.
Nightspire
paaf.gov.kw
Chort
Costa Del Sol Hotels
Sarcoma
kharafiglobal.com
Lockbit3

Frequently asked questions

How many ransomware attacks have occurred in Kuwait?

Kuwait has recorded 15 ransomware victim disclosures in this database, ranking #76 globally. This represents 0.1% of all tracked ransomware attacks worldwide.

Which ransomware groups target Kuwait?

The ransomware groups most active in Kuwait are Lockbit5, Clop, N0n, Nasirsecurity. These groups collectively account for the majority of victim disclosures attributed to Kuwait.

Which industries are most targeted by ransomware in Kuwait?

In Kuwait, the most frequently targeted sectors are Business Services, Hospitality and Tourism, Telecommunication. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Kuwait rank globally for ransomware attacks?

Kuwait ranks #76 globally for ransomware attacks with 15 victim disclosures, representing 0.1% of the worldwide total of 23,696 tracked victims.

How can organisations in Kuwait protect against ransomware?

Organisations in Kuwait should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Kuwait is also recommended.