Ransomware threat profile: Netherlands
Netherlands ranks #23 worldwide for ransomware disclosures, with 146 victims in this database — 0.6% of the global total. The groups listing the most organisations here are Lockbit5, Qilin and Incransom.
The most frequently listed industries in Netherlands are Technology, Business Services, Manufacturing. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.
The volume reflects Netherlands's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.