Peru
PERansomware victim intelligence profile · Ranked #35 globally · Updated: Jul 21, 2026
Ransomware Threat Profile: Peru
Peru ranks #35 globally for ransomware attacks, with 62 confirmed victims in this database — representing 0.3% of the worldwide total. The most active ransomware groups targeting Peru include Qilin, Blackshrantac, Akira.
The most frequently targeted industries in Peru are Public Sector, Agriculture and Food Production, Business Services. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
Peru's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in Peru should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in Peru (20 cached of 62 total)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | Famesa | Qilin | Agriculture and Food Production | Jul 19, 2026 |
| 2 | sansilvestre.edu.pe | Krybit | Education | Jun 25, 2026 |
| 3 | transvill.com.pe | Nova | Transportation/Logistics | Jun 24, 2026 |
| 4 | Corporación Primax S.A. | Aurora | — | Jun 23, 2026 |
| 5 | Sunass | Nova | — | Jun 16, 2026 |
| 6 | shougang.com.pe | Lockbit5 | Manufacturing | Jun 11, 2026 |
| 7 | Desysweb | Nova | Technology | May 8, 2026 |
| 8 | Diviso Grupo Financiero | Thegentlemen | Financial Services | May 6, 2026 |
| 9 | protectasecurity.pe | Apt73 | Business Services | Apr 27, 2026 |
| 10 | corahperu.org | Apt73 | Public Sector | Apr 27, 2026 |
| 11 | Peru LNG (Hunt LNG Operating Company) | Coinbasecartel | Energy | Apr 23, 2026 |
| 12 | comunidadandina.org | Lockbit5 | Public Sector | Apr 14, 2026 |
| 13 | Grupo Tawa | Thegentlemen | Business Services | Mar 23, 2026 |
| 14 | Grupo Coril | Qilin | Financial Services | Mar 21, 2026 |
| 15 | Grupo San Jacinto | Thegentlemen | Agriculture and Food Production | Mar 9, 2026 |
| 16 | Verlat Energy | Vect | Energy | Mar 4, 2026 |
| 17 | Alpha Consult | Qilin | Business Services | Feb 26, 2026 |
| 18 | San Silvestre School | Qilin | Education | Jan 11, 2026 |
| 19 | National Water Authority | Blackshrantac | Public Sector | Jan 8, 2026 |
| 20 | surfishtrade.com | Lockbit5 | Agriculture and Food Production | Dec 29, 2025 |
Frequently Asked Questions
How many ransomware attacks have occurred in Peru?
Peru has recorded 62 ransomware victim disclosures in this database, ranking #35 globally. This represents 0.3% of all tracked ransomware attacks worldwide.
Which ransomware groups target Peru?
The ransomware groups most active in Peru are Qilin, Blackshrantac, Akira, Nova. These groups collectively account for the majority of victim disclosures attributed to Peru.
Which industries are most targeted by ransomware in Peru?
In Peru, the most frequently targeted sectors are Public Sector, Agriculture and Food Production, Business Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does Peru rank globally for ransomware attacks?
Peru ranks #35 globally for ransomware attacks with 62 victim disclosures, representing 0.3% of the worldwide total of 19,524 tracked victims.
How can organisations in Peru protect against ransomware?
Organisations in Peru should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Peru is also recommended.