Vietnam
VNRansomware victim intelligence profile · Ranked #45 globally · Updated: May 12, 2026
Ransomware Threat Profile: Vietnam
Vietnam ranks #45 globally for ransomware attacks, with 40 confirmed victims in this database — representing 0.2% of the worldwide total. The most active ransomware groups targeting Vietnam include Thegentlemen, Stormous, Dragonforce.
The most frequently targeted industries in Vietnam are Technology, Business Services, Manufacturing. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
Vietnam's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in Vietnam should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in Vietnam (20 cached of 40 total)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | ttt.vn TTT Corporation | Stormous | — | May 6, 2026 |
| 2 | Vietnam Fortress Tools JSC | Dragonforce | Manufacturing | Apr 4, 2026 |
| 3 | FindNear | Cipherforce | Technology | Feb 23, 2026 |
| 4 | Pacific Airlines | Coinbasecartel | Transportation/Logistics | Jan 29, 2026 |
| 5 | SASI JSC | Thegentlemen | Manufacturing | Jan 20, 2026 |
| 6 | Vietnam Airlines | Qilin | Transportation/Logistics | Jan 18, 2026 |
| 7 | Sunshine Group | Qilin | — | Dec 11, 2025 |
| 8 | TUAN LE Construction Company Limited | Radar | Construction | Dec 1, 2025 |
| 9 | NBCAPITAL JOINT STOCK COMPANY | Thegentlemen | Financial Services | Nov 24, 2025 |
| 10 | Pacific Holdings Group JSC. | Thegentlemen | Healthcare | Nov 23, 2025 |
| 11 | Vascara, Vietnam | Nightspire | Consumer Services | Nov 11, 2025 |
| 12 | www.oucru.org | Devman | Education | Nov 5, 2025 |
| 13 | SAIGON INDUSTRIAL SERVICE | Dragonforce | Manufacturing | Nov 5, 2025 |
| 14 | Donacoop (VinaCapital) | Thegentlemen | Agriculture and Food Production | Oct 26, 2025 |
| 15 | CIC Vietnam | Shinyhunters | Business Services | Oct 5, 2025 |
| 16 | Vietnam Airlines | Shinyhunters | Transportation/Logistics | Oct 3, 2025 |
| 17 | United Pharma | Sinobi | Healthcare | Sep 18, 2025 |
| 18 | Tri Thuc Software | Desolator | Technology | Aug 30, 2025 |
| 19 | Tien Tuan Pharmaceutical Machinery Co. Ltd | Crypto24 | Healthcare | Jun 5, 2025 |
| 20 | Lts.com.vn | Flocker | Technology | Jun 5, 2025 |
Frequently Asked Questions
How many ransomware attacks have occurred in Vietnam?
Vietnam has recorded 40 ransomware victim disclosures in this database, ranking #45 globally. This represents 0.2% of all tracked ransomware attacks worldwide.
Which ransomware groups target Vietnam?
The ransomware groups most active in Vietnam are Thegentlemen, Stormous, Dragonforce, Qilin. These groups collectively account for the majority of victim disclosures attributed to Vietnam.
Which industries are most targeted by ransomware in Vietnam?
In Vietnam, the most frequently targeted sectors are Technology, Business Services, Manufacturing. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does Vietnam rank globally for ransomware attacks?
Vietnam ranks #45 globally for ransomware attacks with 40 victim disclosures, representing 0.2% of the worldwide total of 17,791 tracked victims.
How can organisations in Vietnam protect against ransomware?
Organisations in Vietnam should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Vietnam is also recommended.