Public Sector Ransomware Victims & Data Breaches

Breach House is tracking 1592 organizations in the Public Sector sector named by ransomware and data-extortion groups, with activity recorded as recently as June 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Public Sector

play 590 hunters 79 lockbit3 65 qilin 63 medusa 54 incransom 41 alphv 32 rhysida 27

Top countries for Public Sector attacks

United States 1062 Canada 23 United Kingdom 19 Brazil 17 France 16 Mexico 16 Germany 13 Thailand 13

Public Sector Victims Page 1 / 16

Type Target Source Discovered Country Intel Link
Ransomware Sunass View Details nova Peru
Ransomware Kedah View Details nova Malaysia
Ransomware hoodriversheriff.com View Details safepay United States
Ransomware Ministarstvo zdravstva Republike Hrvatske View Details thegentlemen Croatia
Ransomware National Museum View Details thegentlemen Denmark
Ransomware NSW Government View Details nova Australia
Ransomware K****** County. Mi**e**ta View Details nightspire United States
Ransomware myipo.gov.my View Details payload Malaysia
Ransomware jastrebarsko.hr View Details threeam Croatia
Ransomware aisem.gob.bo View Details krybit Bolivia, Plurinational State of
Ransomware Cal Fresh View Details termite Canada
Ransomware elections.mia.gov.am from WOLVES OF TURAN View Details apt73 Armenia
Ransomware Champaign-Urbana Public Health District View Details incransom United States
Ransomware landkreis-limburg-weilburg.de View Details abyss Germany
Ransomware Henry Molded Products Likely to Engage tag. View Details dragonforce United States
Ransomware Commune De Camiers View Details kairos France
Ransomware Badan Pangan Nasional View Details nova Indonesia
Ransomware SECONT Secretaria de Controle e Transparência View Details nova Brazil
Ransomware Le Perreux sur Marne View Details thegentlemen France
Ransomware bangkok.go.th View Details krybit Thailand
Ransomware University of Valencia View Details nova Spain
Ransomware tkgm.gov.tr View Details apt73 Türkiye
Ransomware Landeshauptstadt Stuttgart View Details rhysida Germany
Ransomware Nordfjord Hotell View Details nova Norway
Ransomware ETM-ELECTROMATIC, INC. View Details titan United States
Ransomware Trésor Public View Details AuditTeam Senegal
Ransomware Majlis Perbandaran Alor Gajah View Details qilin Malaysia
Ransomware Amplify Technology View Details shadowbyt3$ United Kingdom
Ransomware University Of Georgia View Details shadowbyt3$ United States
Ransomware ttt.vn UPDATE-FULL DATA DUMP View Details stormous Viet Nam
Ransomware SHERIFF View Details qilin Ukraine
Ransomware Qatar National Broadband View Details thegentlemen Qatar
Ransomware NorthWest Handling Systems View Details aurora Canada
Ransomware Casino Gaming Commission View Details genesis Jamaica
Ransomware Ayuntamiento de Valdemoro View Details kairos Spain
Ransomware Advanced Software Products Group View Details cmdorganization United States
Ransomware Kent District Library View Details interlock United States
Ransomware McCarthy View Details thegentlemen United States
Ransomware PennEastern Architects View Details cmdorganization United States
Ransomware Trellix (McAfee & FireEye) View Details ransomhouse United States
Ransomware Le Maire de QUIBERON View Details qilin France
Ransomware Magisterial Service View Details thegentlemen Papua New Guinea
Ransomware Desert Christian Schools (DCS) View Details medusalocker United States
Ransomware zonaovest.to.it View Details safepay Italy
Ransomware City of Sandstone View Details qilin United States
Ransomware Metropolitan Police Department D.C. View Details ddosecret —
Ransomware wyomingcountyny.gov View Details threeam United States
Ransomware townofnorwell.net View Details threeam United States
Ransomware Winona County View Details interlock United States
Ransomware Indonesia's Customs Analytics Platform View Details everest Indonesia
Ransomware siapenet.gov.br View Details apt73 Brazil
Ransomware compensatii.gov.md View Details apt73 Moldova, Republic of
Ransomware corahperu.org View Details apt73 Peru
Ransomware haca.ma View Details apt73 Morocco
Ransomware shj.ae View Details apt73 United Arab Emirates
Ransomware moccae.gov.ae View Details apt73 United Arab Emirates
Ransomware dpwh.gov.ph View Details apt73 Philippines
Ransomware ires.ma View Details apt73 Morocco
Ransomware egov.sc View Details apt73 Seychelles
Ransomware ifmis.go.ke View Details apt73 Kenya
Ransomware massdevelopment.com View Details dragonforce United States
Ransomware Rural Municipality of Gimli View Details payload Canada
Ransomware Coralina View Details thegentlemen Colombia
Ransomware Dorotea Sweden View Details incransom Sweden
Ransomware City of Napoleon, Ohio View Details qilin United States
Ransomware Kementerian Pertanian View Details coinbasecartel Indonesia
Ransomware ruskcountywi.us View Details qilin United States
Ransomware Anderlues View Details thegentlemen Belgium
Ransomware abfall-kreis-kassel.de View Details safepay Germany
Ransomware When the Army’s Chief Was Under Handala’s Watch! General Herzi Halevi View Details handala ISRAEL
Ransomware Unprecedented Exposure: Identities of 80 Senior Cyber Officers of “Iran Desk” in Unit 8200... View Details handala ISRAEL
Ransomware Superintendency of territorial planning View Details coinbasecartel Ecuador
Ransomware Kemenpppa View Details coinbasecartel Indonesia
Ransomware townoforangeva.gov View Details lockbit5 United States
Ransomware awvgrazerfeld.at View Details lockbit5 Austria
Ransomware mesto-jemnice.cz View Details lockbit5 Czechia
Ransomware comunidadandina.org View Details lockbit5 Peru
Ransomware Caja De Seguro Social View Details thegentlemen Panama
Ransomware morgancountyga.gov View Details incransom United States
Ransomware Hospital del Sur View Details thegentlemen Argentina
Ransomware St. Joseph County View Details handala United States
Ransomware 50 Senior Unit 9900 Officers Exposed View Details handala —
Ransomware Pemerintah Kabupaten Bojonegoro View Details nova Indonesia
Ransomware FR MINISTRY AGRICULTURE View Details lapsus$ France
Ransomware Modesto Police Department View Details ddosecret —
Ransomware Faulkner County Sheriff's Office View Details qilin United States
Ransomware State Road and Tollway Authority View Details qilin United States
Ransomware rovinj-rovigno.hr View Details lockbit5 Croatia
Ransomware gov.krd View Details lockbit5 Iraq
Ransomware ombudsman.gov.ws View Details lockbit5 Samoa
Ransomware nandrin.be View Details lockbit5 Belgium
Ransomware European Commission (*.europa.eu) View Details shinyhunters —
Ransomware *h**i **o**e** View Details nightspire —
Ransomware meridenct.gov View Details incransom United States
Ransomware Kash Patel current director of the FBI View Details handala —
Ransomware jaxa.jp View Details ALP-001 Japan
Ransomware Washoe Tribe View Details qilin United States
Ransomware Propaganda Chief and Former Mossad Deputy Exposed by Handala Hack View Details handala —
Ransomware Architect of Warfare Exposed: Eran Ortal’s Hidden Strategies Now Public View Details handala —
Ransomware Behind the Curtain: Full Details of Shin Bet’s Iran Desk Officers Released View Details handala Israel

Explore other industry sectors

Other 7080 Communication / Marketing 5018 Services 2750 Finance / Legal / Insurance 2441 Manufacturing / Engineering 1942 Healthcare / Pharma 1707 IT 1400 Construction / Real Estate 1177 Education 1037 Energy 715 Retail / E-commerce 709 Transportation / Travel / Logistics 593 All sectors →