We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Telecommunications Ransomware Victims & Data Breaches

DARK EYE ALERTS
Get an alert whenever a new Telecommunications organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Dark Eye is tracking 417 organizations in the Telecommunications sector named by ransomware and data-extortion groups, with activity recorded as recently as October 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Telecommunications

Telecommunications Victims Page 5 / 5

Type Target Source Discovered Country Intel Link
Ransomware Alispharm View Details everest —
Ransomware Intensive Care On-Line Network , Inc View Details avaddon —
Ransomware T-Mobile View Details arvinclub —
Ransomware Corporación Nacional de Telecomunicación (CNT) View Details ransomexx Ecuador
Ransomware SAC Wireless View Details conti United States
Ransomware Merseyrail (Rail network) View Details lockbit United Kingdom
Ransomware Security breach of CAPCOM network View Details ragnarlocker —
Ransomware Security breach of Campari Group network View Details ragnarlocker —
Ransomware Telecom Argentina View Details revil Argentina
Ransomware Orange (mobile operator) View Details nefilim France
Ransomware WorldNet Telecommunications and ISP View Details maze Puerto Rico
Ransomware Sri Lanka Telecom View Details revil Sri Lanka
Ransomware Network of Village of Weiz View Details netwalker Austria
Ransomware Dakota Carrier Network (DCN) View Details maze United States
Ransomware Bretagne Telecom View Details doppelpaymer France
Ransomware Portugal Telecom View Details wannacry Portugal
Ransomware Deutsche Bahn (Germany Rail Network) View Details wannacry Germany

Explore other industry sectors