« All threats

Ransomware in Thailand

In the last 12 months, 60 organisations in Thailand have been claimed by ransomware groups, 5 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.

Claimed victims60Thailand · last 12 monthsClaimed victims5Thailand · last 30 daysConfirmed by press0Thailand · last 12 months

Explore with filters →🔔 Get alerts for Thailand

Victims per month

  1. Nov 250
  2. Dec 250
  3. Jan 260
  4. Feb 260
  5. Mar 260
  6. Apr 2614
  7. May 268
  8. Jun 2614
  9. Jul 267
  10. Aug 2610
  11. Sep 267
  12. Oct 260

Most active groups (12 months)

  1. The Gentlemen21
  2. Krybit10
  3. Lockbit56
  4. Lamashtu4
  5. Dragonforce3
  6. Eraleign (Apt73)2
  7. Panzer2
  8. Safepay1
  9. Qilin1
  10. Clop1

Most affected sectors

  1. Manufacturing11
  2. Retail8
  3. Technology6
  4. Transport & logistics4
  5. Pharma & chemicals4
  6. Agriculture & food4
  7. Construction3
  8. Other3
  9. Hospitality & tourism3
  10. Professional services3

Recent victims

OrganisationGroupSectorClaimedStatus
I.T. Foods IndustriesShibaAgriculture & food9/28/2026◌ Claimed (unverified)
AuromexSafepayManufacturing9/28/2026◌ Claimed (unverified)
JSSR OptionsKillsec3Transport & logistics9/27/2026◌ Claimed (unverified)
DAD Co.ClopOther9/23/2026◌ Claimed (unverified)
Technical AsiaThe GentlemenManufacturing9/14/2026◌ Claimed (unverified)
Reignwood Park ThailandKrybitReal estate9/1/2026◌ Claimed (unverified)
Orex Trading Co., Ltd.KrybitPharma & chemicals9/1/2026◌ Claimed (unverified)
AYUDHYA InsuranceDysphor1aFinance & insurance8/29/2026◌ Claimed (unverified)
Sunsea PlasticsThe GentlemenManufacturing8/29/2026◌ Claimed (unverified)
Thai Film Industries PCLThe GentlemenManufacturing8/29/2026◌ Claimed (unverified)
Syscon (Thailand) Co., Ltd.KrybitTechnology8/26/2026◌ Claimed (unverified)
Lemon Farm Co., Ltd.KrybitRetail8/26/2026◌ Claimed (unverified)
WMI Emporium Co., Ltd.KrybitManufacturing8/26/2026◌ Claimed (unverified)
Sunsea PlasticsKrybitManufacturing8/19/2026◌ Claimed (unverified)
Minor Food GroupPanzerRetail8/10/2026◌ Claimed (unverified)
Siam Oil ProductPanzerEnergy & utilities8/9/2026◌ Claimed (unverified)
Siam Stabilizers and ChemicalsGunraPharma & chemicals8/2/2026◌ Claimed (unverified)
Thai Seng InternationalNightspireOther7/27/2026◌ Claimed (unverified)
Katathani Phuket Beach ResortDragonforceHospitality & tourism7/27/2026◌ Claimed (unverified)
Tesco Engineer Co., Ltd.DeadlockManufacturing7/27/2026◌ Claimed (unverified)
Metrabyte CloudEraleign (Apt73)Technology7/24/2026◌ Claimed (unverified)
CH. Karnchang Public Company LimitedKrybitConstruction7/23/2026◌ Claimed (unverified)
AsimarDragonforceTransport & logistics7/14/2026◌ Claimed (unverified)
KT RestaurantMajinahanashiHospitality & tourism7/1/2026◌ Claimed (unverified)
Comp Trading Co., Ltd.The GentlemenTechnology6/30/2026◌ Claimed (unverified)
Royal Thai Navy Housing Cooperative LimitedThe GentlemenReal estate6/22/2026◌ Claimed (unverified)
Sivatel BangkokQilinHospitality & tourism6/21/2026◌ Claimed (unverified)
AMCLockbit5Professional services6/18/2026◌ Claimed (unverified)
Major CineplexLockbit5Media & entertainment6/18/2026◌ Claimed (unverified)
SAICOLockbit5Agriculture & food6/18/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.