« All threats

Ransomware in Australia

In the last 12 months, 62 organisations in Australia have been claimed by ransomware groups, 15 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.

Victims, last 12 months62
Last 30 days15
Confirmed by press0

Explore with filters →🔔 Get alerts for Australia

Victims per month

  1. Nov 250
  2. Dec 250
  3. Jan 260
  4. Feb 260
  5. Mar 260
  6. Apr 268
  7. May 2612
  8. Jun 268
  9. Jul 2611
  10. Aug 268
  11. Sep 2615
  12. Oct 260

Most active groups (12 months)

  1. The Gentlemen11
  2. Storm7
  3. Qilin5
  4. M3rx3
  5. Dragonforce3
  6. Kairos3
  7. Stormous3
  8. INC Ransom3
  9. 3am2
  10. Safepay2

Most affected sectors

  1. Retail8
  2. Construction7
  3. Manufacturing5
  4. Automotive4
  5. Other4
  6. Agriculture & food4
  7. Real estate4
  8. Professional services4
  9. Media & entertainment3
  10. Education3

Recent victims

OrganisationGroupSectorClaimedStatus
Virtual IdeasLamashtuMedia & entertainment9/30/2026◌ Claimed (unverified)
St James' Anglican School3amEducation9/28/2026◌ Claimed (unverified)
Fancy FilmsKillsec3Media & entertainment9/27/2026◌ Claimed (unverified)
Jones the GrocerKrybitRetail9/24/2026◌ Claimed (unverified)
Transport NSWClopGovernment9/23/2026◌ Claimed (unverified)
Dome Gold MinesThe GentlemenAgriculture & food9/14/2026◌ Claimed (unverified)
Alchin Long GroupThe GentlemenManufacturing9/14/2026◌ Claimed (unverified)
AgrimacStormAgriculture & food9/9/2026◌ Claimed (unverified)
3-point AustraliaStormProfessional services9/9/2026◌ Claimed (unverified)
Westco Motors CairnsStormAutomotive9/9/2026◌ Claimed (unverified)
MacquarrieStormManufacturing9/9/2026◌ Claimed (unverified)
Sharp Motor GroupStormAutomotive9/9/2026◌ Claimed (unverified)
PenfoldStormAutomotive9/9/2026◌ Claimed (unverified)
Ramsey BrosStormRetail9/9/2026◌ Claimed (unverified)
Sharp OfficeThe GentlemenRetail9/7/2026◌ Claimed (unverified)
Ollies Place KidswearThe GentlemenRetail8/14/2026◌ Claimed (unverified)
SIA Medical CentreRhysidaHealthcare8/13/2026◌ Claimed (unverified)
BEDCINC RansomOther8/12/2026◌ Claimed (unverified)
MIDLANDINDClopManufacturing8/12/2026◌ Claimed (unverified)
Vitex PharmaceuticalsThe GentlemenPharma & chemicals8/7/2026◌ Claimed (unverified)
🔒 Entidad empresarial (AU)L GroupOther8/6/2026◌ Claimed (unverified)
Intertrust AustraliaQilinReal estate8/2/2026◌ Claimed (unverified)
Asset Flooring Group AustraliaQilinConstruction8/2/2026◌ Claimed (unverified)
Contact GroupCmd OrganizationConstruction7/30/2026◌ Claimed (unverified)
West African Resources LimitedDeadlockEnergy & utilities7/26/2026◌ Claimed (unverified)
AusProofM3rxManufacturing7/24/2026◌ Claimed (unverified)
HBS GroupThe GentlemenConstruction7/23/2026◌ Claimed (unverified)
Lenrose & Ace David JewelleryThe GentlemenManufacturing7/23/2026◌ Claimed (unverified)
TC Printing Australia Pty LtdThe GentlemenMedia & entertainment7/23/2026◌ Claimed (unverified)
LR ReedKairosReal estate7/22/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.