Philippines
PHRansomware victim intelligence profile · Ranked #35 globally · Updated: Sep 16, 2026
ThreatAI Analysis
Compiled from this database and the ransomware.live profiles of the groups active in Philippines. Figures are computed from the tracked records, not inferred.
The Philippines has recorded 72 ransomware attacks globally ranked 35th, with most activity from Qilin, Thegentlemen, and Incransom targeting Business Services and Financial Services sectors.
Philippines in the global picture
Philippines accounts for 74 of the ransomware disclosures tracked here, ranking #35 worldwide and making up 0.3% of the global total. The sectors listed most often are Business Services, Manufacturing, Financial Services.
Who is most active in Philippines
Qilin — 16 victims in Philippines. Qilin ransomware was first observed in July of 2022. Thegentlemen — 7 victims in Philippines. Incransom — 5 victims in Philippines.
Ransomware Threat Profile: Philippines
Philippines ranks #35 globally for ransomware attacks, with 74 confirmed victims in this database — representing 0.3% of the worldwide total. The most active ransomware groups targeting Philippines include Qilin, Thegentlemen, Incransom.
The most frequently targeted industries in Philippines are Business Services, Manufacturing, Financial Services. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
Philippines's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in Philippines should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in Philippines (showing 74 of 74)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | General Santos Doctors Hospital | Rhysida | Healthcare | Sep 10, 2026 |
| 2 | cenmar-manila.com | Safepay | Manufacturing | Sep 8, 2026 |
| 3 | Philippine Ports Authority | Qilin | Transportation | Sep 5, 2026 |
| 4 | Globalport Terminals | Qilin | Transportation | Aug 27, 2026 |
| 5 | LifeBank Microfinance Foundation | Coinbasecartel | Financial Services | Aug 22, 2026 |
| 6 | Questronix | Qilin | — | Aug 20, 2026 |
| 7 | Megawide | Qilin | Manufacturing | Aug 16, 2026 |
| 8 | City Government of Baguio | Emperador | Government & Defense | Aug 12, 2026 |
| 9 | Health Carousel | Direwolf | Healthcare | Aug 10, 2026 |
| 10 | LT Group / Fortune Tobacco Corp | Deadlock | Manufacturing | Aug 10, 2026 |
| 11 | TSC Logistics | Dark project | Transportation | Aug 5, 2026 |
| 12 | lccgroup.com | Incransom | Professional Services | Aug 4, 2026 |
| 13 | Philippine Savings Bank | Thegentlemen | Financial Services | Aug 1, 2026 |
| 14 | AppleOne Properties | Qilin | — | Jul 23, 2026 |
| 15 | FAST.COM.PH | Incransom | Technology | Jul 18, 2026 |
| 16 | FAST.COM.PH | Incransom | Technology | Jul 18, 2026 |
| 17 | www.twtci.com Trans World Trading | Dragonforce | Business Services | Jul 13, 2026 |
| 18 | Red Planet Hotels | Qilin | Hospitality and Tourism | Jul 10, 2026 |
| 19 | Jump Solutions Inc | Thegentlemen | Business Services | Jul 7, 2026 |
| 20 | felizhotelboracay.com | Lockbit5 | Hospitality and Tourism | Jun 20, 2026 |
| 21 | libertyinsurance.com.ph | Krybit | Financial Services | Jun 10, 2026 |
| 22 | case.law | Black x | Business Services | Jun 2, 2026 |
| 23 | Panorama BPO | Dragonforce | Business Services | Jun 1, 2026 |
| 24 | Don Bosco Technical Institute of Makati | Nova | Education | May 17, 2026 |
| 25 | B.Care Medical Center | Qilin | Healthcare | May 15, 2026 |
| 26 | Startec Group of Companies | Aurora | Business Services | May 12, 2026 |
| 27 | Philex Mining | Qilin | Energy | Apr 30, 2026 |
| 28 | pricon.com.ph | Lockbit5 | Business Services | Apr 29, 2026 |
| 29 | dpwh.gov.ph | Apt73 | Public Sector | Apr 27, 2026 |
| 30 | Woodfields Consultants | Qilin | Business Services | Apr 25, 2026 |
| 31 | Sunlight Express Airways | Payload | Transportation/Logistics | Apr 16, 2026 |
| 32 | Kawasaki Motors Philippines Corporation | Auditteam | Manufacturing | Apr 8, 2026 |
| 33 | Alliance Select Foods International | Dragonforce | Agriculture and Food Production | Mar 29, 2026 |
| 34 | PTT Philippines | Thegentlemen | Energy | Mar 22, 2026 |
| 35 | TS Lines Philippines | Payload | Transportation/Logistics | Mar 20, 2026 |
| 36 | Lucky Innovative Manufacturing Corporation | Payload | Manufacturing | Mar 19, 2026 |
| 37 | United Limsun International Trading | Payload | Consumer Services | Mar 14, 2026 |
| 38 | White Beach Hotel | Thegentlemen | Hospitality and Tourism | Feb 13, 2026 |
| 39 | Philippine Savings Bank (Metrobank Group) | Qilin | Financial Services | Jan 28, 2026 |
| 40 | lenotech.com.ph | Tengu | Technology | Jan 27, 2026 |
| 41 | DTI Foreign Trade Service Corps | Thegentlemen | Business Services | Jan 11, 2026 |
| 42 | The Araneta Group | Osiris | Hospitality and Tourism | Dec 18, 2025 |
| 43 | Ciif | Qilin | — | Dec 17, 2025 |
| 44 | Quezon Power | Devman | Energy | Dec 12, 2025 |
| 45 | Cagayan Appliance Center | Qilin | Consumer Services | Dec 9, 2025 |
| 46 | Seipi | Qilin | — | Dec 8, 2025 |
| 47 | 51talk.com | Lockbit5 | Education | Dec 7, 2025 |
| 48 | AMH Philippines | Qilin | — | Dec 7, 2025 |
| 49 | Public Safety Mutual Benefit Fund | Ransomhouse | Public Sector | Nov 11, 2025 |
| 50 | Personal Collection | Thegentlemen | Consumer Services | Oct 9, 2025 |
| 51 | 2GO Group | Thegentlemen | Transportation/Logistics | Oct 5, 2025 |
| 52 | Yamaha Motor Philippines | Incransom | Manufacturing | Sep 14, 2025 |
| 53 | gmtaconline | Warlock | — | Aug 17, 2025 |
| 54 | Xperthair | Qilin | Consumer Services | Aug 16, 2025 |
| 55 | W.L. FOODS | Direwolf | Agriculture and Food Production | Jul 28, 2025 |
| 56 | Tuna Processors Phillipines, Inc | Nightspire | Agriculture and Food Production | Jul 13, 2025 |
| 57 | Majestic | Incransom | — | Jul 9, 2025 |
| 58 | palawancoop hospital | Qilin | Healthcare | Jun 10, 2025 |
| 59 | Eight8Ate Holdings, Inc | Hunters | Consumer Services | May 27, 2025 |
| 60 | Fong Shann Printing Philippines | Arcusmedia | Manufacturing | May 18, 2025 |
| 61 | EVAS Group | Blacklock | Transportation/Logistics | May 16, 2025 |
| 62 | www.jparkislandresort.com | Stormous | Hospitality and Tourism | May 15, 2025 |
| 63 | GMA NETWORK | Devman | Telecommunication | May 7, 2025 |
| 64 | 51talk.com | Lockbit3 | Education | Mar 18, 2025 |
| 65 | FOTE.COM | Clop | Financial Services | Feb 27, 2025 |
| 66 | abcapital.com.ph | Lockbit3 | Financial Services | Feb 10, 2025 |
| 67 | noblehouse.com.ph | Ransomhub | Hospitality and Tourism | Oct 29, 2024 |
| 68 | Suntrust Properties | Sarcoma | Business Services | Oct 9, 2024 |
| 69 | Removal.AI | Ransomhub | Technology | Sep 2, 2024 |
| 70 | www.jgsummit.com.ph | Ransomhub | — | Aug 7, 2024 |
| 71 | Topserve Service Solutions | 8base | Business Services | Jun 21, 2024 |
| 72 | filmetrics corporation | Trinity | Technology | Jun 11, 2024 |
| 73 | ABS-CBN Broadcasting | Ransomhouse | Business Services | May 17, 2024 |
| 74 | FILSCAP | Arcusmedia | Business Services | May 15, 2024 |
Frequently Asked Questions
How many ransomware attacks have occurred in Philippines?
Philippines has recorded 74 ransomware victim disclosures in this database, ranking #35 globally. This represents 0.3% of all tracked ransomware attacks worldwide.
Which ransomware groups target Philippines?
The ransomware groups most active in Philippines are Qilin, Thegentlemen, Incransom, Payload. These groups collectively account for the majority of victim disclosures attributed to Philippines.
Which industries are most targeted by ransomware in Philippines?
In Philippines, the most frequently targeted sectors are Business Services, Manufacturing, Financial Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does Philippines rank globally for ransomware attacks?
Philippines ranks #35 globally for ransomware attacks with 74 victim disclosures, representing 0.3% of the worldwide total of 21,658 tracked victims.
How can organisations in Philippines protect against ransomware?
Organisations in Philippines should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Philippines is also recommended.