« All threats

Ransomware in Egypt

In the last 12 months, 24 organisations in Egypt have been claimed by ransomware groups, 2 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.

Claimed victims24Egypt · last 12 monthsClaimed victims2Egypt · last 30 daysConfirmed by press0Egypt · last 12 months

Explore with filters →🔔 Get alerts for Egypt

Victims per month

  1. Nov 250
  2. Dec 250
  3. Jan 260
  4. Feb 260
  5. Mar 260
  6. Apr 269
  7. May 264
  8. Jun 263
  9. Jul 261
  10. Aug 262
  11. Sep 265
  12. Oct 260

Most active groups (12 months)

  1. The Gentlemen6
  2. Krybit5
  3. Payload4
  4. Nightspire2
  5. Lamashtu2
  6. Lockbit52
  7. Dragonforce1
  8. Orova1
  9. Eraleign (Apt73)1

Most affected sectors

  1. Agriculture & food3
  2. Construction3
  3. Hospitality & tourism3
  4. Pharma & chemicals3
  5. Retail2
  6. Healthcare2
  7. Real estate2
  8. Energy & utilities2
  9. Transport & logistics1
  10. Manufacturing1

Recent victims

OrganisationGroupSectorClaimedStatus
Egyptian Airports CompanyKrybitTransport & logistics9/12/2026◌ Claimed (unverified)
Nile Projects TradingThe GentlemenRetail9/7/2026◌ Claimed (unverified)
Seashell HospitalKrybitHealthcare9/1/2026◌ Claimed (unverified)
Mecca High Feed FactoryKrybitAgriculture & food9/1/2026◌ Claimed (unverified)
The Holding Company for Construction and DevelopmentKrybitConstruction9/1/2026◌ Claimed (unverified)
Mima FoodsKrybitAgriculture & food8/26/2026◌ Claimed (unverified)
ADG HealthcareOrovaHealthcare8/5/2026◌ Claimed (unverified)
EBNY DevelopmentThe GentlemenReal estate7/6/2026◌ Claimed (unverified)
Great FoodsLamashtuAgriculture & food6/17/2026◌ Claimed (unverified)
Sheraton Miramar Resort El GounaNightspireHospitality & tourism6/15/2026◌ Claimed (unverified)
Bouri GroupThe GentlemenRetail6/1/2026◌ Claimed (unverified)
Papa John's EgyptNightspireHospitality & tourism5/24/2026◌ Claimed (unverified)
Rhactus HotelLockbit5Hospitality & tourism5/19/2026◌ Claimed (unverified)
Misr Chemical Industries Co.The GentlemenPharma & chemicals5/8/2026◌ Claimed (unverified)
Luna GroupLamashtuPharma & chemicals5/4/2026◌ Claimed (unverified)
Alexandria Petroleum CompanyEraleign (Apt73)Energy & utilities4/27/2026◌ Claimed (unverified)
EEC GroupThe GentlemenConstruction4/23/2026◌ Claimed (unverified)
Better House DevelopmentPayloadReal estate4/20/2026◌ Claimed (unverified)
Oriental WeaversPayloadManufacturing4/16/2026◌ Claimed (unverified)
El Wastani Petroleum Company (WASCO)PayloadEnergy & utilities4/8/2026◌ Claimed (unverified)
ACE Consulting EngineersThe GentlemenConstruction4/7/2026◌ Claimed (unverified)
Mercedes-BenzLockbit5Automotive4/6/2026◌ Claimed (unverified)
AUG PharmaDragonforcePharma & chemicals4/4/2026◌ Claimed (unverified)
United Finance EgyptPayloadFinance & insurance4/3/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.