Energy Ransomware Victims & Data Breaches
DARK EYE ALERTS
Get an alert whenever a new Energy organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.
Dark Eye is tracking 763 organizations in the Energy sector named by ransomware and data-extortion groups, with activity recorded as recently as October 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 763Victims tracked
- 8Threat groups
- 8Countries
- October 2026Latest activity
Most active ransomware groups targeting Energy
Top countries for Energy attacks
Energy Victims Page 2 / 8
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Parque Eólico Toabré View Details | everest | Panama | ||
| Ransomware | Ming Hwei Energy View Details | exitium | Taiwan, Province of China | ||
| Ransomware | Q2 Artificial Lift Services View Details | payload | Canada | ||
| Ransomware | Orient Petroleum View Details | worldleaks | United Kingdom | ||
| Ransomware | GeoMechanics Technologies View Details | akira | United States | ||
| Ransomware | Transgas View Details | qilin | Czechia | ||
| Ransomware | Voltamper View Details | qilin | Spain | ||
| Ransomware | HOPPECKE Singapore View Details | payload | Singapore | ||
| Ransomware | PTT Philippines View Details | thegentlemen | Philippines | ||
| Ransomware | odayequipment.com View Details | dragonforce | United States | ||
| Ransomware | Pearce Services View Details | worldleaks | United States | ||
| Ransomware | Dynex/Rivett View Details | dragonforce | United States | ||
| Ransomware | Kabelovna Kabex View Details | thegentlemen | Czechia | ||
| Ransomware | Thai Solar Energy Public View Details | payload | Thailand | ||
| Ransomware | RMZ Oilfield Engineering View Details | qilin | Singapore | ||
| Ransomware | Powers HVAC View Details | qilin | United States | ||
| Ransomware | crescentenergyco.com View Details | chaos | United States | ||
| Ransomware | Orange Madagascar View Details | qilin | Madagascar | ||
| Ransomware | Bravo Electro Components View Details | dragonforce | United States | ||
| Ransomware | Verlat Energy View Details | vect | Peru | ||
| Ransomware | Integral Analytics View Details | AiLock | United States | ||
| Ransomware | Sharjah National Oil Corporation View Details | handala | United Arab Emirates | ||
| Ransomware | Omesti Berhad View Details | qilin | Malaysia | ||
| Ransomware | Bain Oil Company View Details | nightspire | United States | ||
| Ransomware | Israel Opportunity Energy View Details | handala | Israel | ||
| Ransomware | Eni Energy View Details | lapsus$ | Italy | ||
| Ransomware | https://daricon.com/ (military US/CA/NATO) View Details | incransom | United States | ||
| Ransomware | https://daricon.com/ View Details | incransom | United States | ||
| Ransomware | acwapower.com \ https://www.larsentoubro.com/ View Details | incransom | Saudi Arabia | ||
| Ransomware | Sawafi View Details | thegentlemen | Saudi Arabia | ||
| Ransomware | American Piping & Boiler Co View Details | nightspire | United States | ||
| Ransomware | Robeck Fluid Power View Details | genesis | United States | ||
| Ransomware | Almacenes Distribuidores de la Frontera View Details | payload | Mexico | ||
| Ransomware | powersmiller.com View Details | lynx | United States | ||
| Ransomware | Oceania Gas Chemicals & Related Products View Details | thegentlemen | Samoa | ||
| Ransomware | FISHWINDOWCLEANING.COM View Details | clop | United States | ||
| Ransomware | UCG Associates View Details | play | United States | ||
| Ransomware | Midwestern Oil & Gas View Details | incransom | Nigeria | ||
| Ransomware | Ghana Bauxite Energy, Utilities & Waste View Details | thegentlemen | Ghana | ||
| Ransomware | ZeroEnergy Design View Details | qilin | United States | ||
| Ransomware | PowerON Services View Details | qilin | United States | ||
| Ransomware | uniquegas View Details | qilin | Singapore | ||
| Ransomware | Gradient Wind Engineering View Details | qilin | Canada | ||
| Ransomware | zeroenergy.com View Details | qilin | United States | ||
| Ransomware | poweron.com View Details | qilin | United States | ||
| Ransomware | Tri-Cities Gastroenterology View Details | insomnia | United States | ||
| Ransomware | Heavy Motions Inc View Details | dragonforce | United States | ||
| Ransomware | Vestas Wind Systems (Denmark) View Details | 0apt | Denmark | ||
| Ransomware | Flowserve Corporation (USA) View Details | 0apt | United States | ||
| Ransomware | Wärtsilä Marine Power (Finland) View Details | 0apt | Finland | ||
| Ransomware | Rotork (UK) View Details | 0apt | United Kingdom | ||
| Ransomware | Western New York Energy View Details | incransom | United States | ||
| Ransomware | Liberia Electricity Corporation (LEC) View Details | 0apt | Liberia | ||
| Ransomware | Horizon Energy Partners View Details | 0apt | United States | ||
| Ransomware | Diamond Deep Drilling View Details | 0apt | — | ||
| Ransomware | Solaris Renewable Energy View Details | 0apt | — | ||
| Ransomware | Blue Water Utilities View Details | 0apt | — | ||
| Ransomware | Solstice Energy Grid View Details | 0apt | — | ||
| Ransomware | Delta Energy Corp View Details | 0apt | United States | ||
| Ransomware | MG Oil View Details | akira | United States | ||
| Ransomware | Summit Global Energy View Details | 0apt | — | ||
| Ransomware | Handala New Account – Sunset of the lions View Details | handala | — | ||
| Ransomware | Hilong Petroleum Pipe Company LLC View Details | nightspire | China | ||
| Ransomware | Midway Windows and Doors View Details | play | United States | ||
| Ransomware | Clipper Petroleum View Details | akira | United States | ||
| Ransomware | Magen Eco Energy View Details | thegentlemen | Israel | ||
| Ransomware | Geoplin View Details | sinobi | Slovenia | ||
| Ransomware | ecsc.org View Details | incransom | United States | ||
| Ransomware | DigiCOURSE View Details | akira | United States | ||
| Ransomware | Texas State Utilities View Details | qilin | United States | ||
| Ransomware | Vereinigte-stadtwerke View Details | payoutsking | Germany | ||
| Ransomware | Quick Safety Electric View Details | tengu | Australia | ||
| Ransomware | Perdana Petroleum Berhad View Details | direwolf | Malaysia | ||
| Ransomware | consigaz.com.br View Details | devman | Brazil | ||
| Ransomware | www.charoenchai.com View Details | tengu | Thailand | ||
| Ransomware | Revoil View Details | obscura | Greece | ||
| Ransomware | CleverPower View Details | obscura | Denmark | ||
| Ransomware | Thai Petroleum & Trading View Details | obscura | Thailand | ||
| Ransomware | McCraw Oil View Details | akira | United States | ||
| Ransomware | Applied LNG View Details | blacknevas | United States | ||
| Ransomware | Complexul Energetic Oltenia View Details | thegentlemen | Romania | ||
| Ransomware | www.tecnoelectric.com.py View Details | lynx | Paraguay | ||
| Ransomware | Windward Life Care View Details | sinobi | United States | ||
| Ransomware | Agralite Electric Cooperative View Details | akira | United States | ||
| Ransomware | coloradopowerline.com View Details | safepay | United States | ||
| Ransomware | Sampoerna Agro View Details | medusa | Indonesia | ||
| Ransomware | Power Curbers View Details | sinobi | United States | ||
| Ransomware | Fairgrove Oil View Details | play | United States | ||
| Ransomware | International Standard Valve View Details | akira | United States | ||
| Ransomware | Solarpro Holding View Details | coinbasecartel | Bulgaria | ||
| Ransomware | GDEV View Details | coinbasecartel | Germany | ||
| Ransomware | Quezon Power View Details | devman | Philippines | ||
| Ransomware | Right Power Technology Sdn Bhd View Details | spacebears | Malaysia | ||
| Ransomware | SCIPIONI View Details | morpheus | Belgium | ||
| Ransomware | Wilsenergy View Details | kairos | United States | ||
| Ransomware | Cadman Power Equipment View Details | securotrop | Canada | ||
| Ransomware | piriou View Details | devman | France | ||
| Ransomware | Quality Companies View Details | sinobi | United States | ||
| Ransomware | ende.bo View Details | lockbit5 | Bolivia, Plurinational State of | ||
| Ransomware | Advanced Power View Details | akira | Switzerland |