Ransomware in the Automotive sector
In the last 12 months, 84 organisations in Automotive have been claimed by ransomware groups, 21 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.
Victims, last 12 months84
Last 30 days21
Confirmed by press0
Explore with filters →🔔 Get alerts for Automotive
Victims per month
- Nov 250
- Dec 250
- Jan 260
- Feb 260
- Mar 260
- Apr 264
- May 2610
- Jun 2614
- Jul 2612
- Aug 2622
- Sep 2622
- Oct 260
Most active groups (12 months)
Most affected countries
Recent victims
| Organisation | Group | Country | Claimed | Status |
|---|---|---|---|---|
| 🔒 Negocio del sector automotriz | Play | — | 9/30/2026 | ◌ Claimed (unverified) |
| Auto Höller | The Gentlemen | Austria | 9/29/2026 | ◌ Claimed (unverified) |
| Pistones Persan | 3am | Argentina | 9/28/2026 | ◌ Claimed (unverified) |
| Factory Five Racing | Metaencryptor | United States | 9/26/2026 | ◌ Claimed (unverified) |
| Astemo Ltd | Metaencryptor | Japan | 9/26/2026 | ◌ Claimed (unverified) |
| ENKEI | The Gentlemen | United States | 9/24/2026 | ◌ Claimed (unverified) |
| Grupo Marsan | The Gentlemen | Spain | 9/21/2026 | ◌ Claimed (unverified) |
| Javep Chevrolet | Akira | — | 9/17/2026 | ◌ Claimed (unverified) |
| RDA MOTORS S.P.A. | Emperador | Italy | 9/16/2026 | ◌ Claimed (unverified) |
| Honda (Peru) | Panzer | Peru | 9/15/2026 | ◌ Claimed (unverified) |
| Lazy Boyz Harley-Davidson Oslo | Akira | Norway | 9/15/2026 | ◌ Claimed (unverified) |
| McCarthy Tire Service | Storm | United States | 9/14/2026 | ◌ Claimed (unverified) |
| Sarku Japan | The Gentlemen | Japan | 9/14/2026 | ◌ Claimed (unverified) |
| Technology Dynamics Inc | Storm | United States | 9/9/2026 | ◌ Claimed (unverified) |
| Star Aviation, Inc | Storm | United States | 9/9/2026 | ◌ Claimed (unverified) |
| Westco Motors Cairns | Storm | Australia | 9/9/2026 | ◌ Claimed (unverified) |
| Sharp Motor Group | Storm | Australia | 9/9/2026 | ◌ Claimed (unverified) |
| Penfold | Storm | Australia | 9/9/2026 | ◌ Claimed (unverified) |
| Zanini | The Gentlemen | Spain | 9/7/2026 | ◌ Claimed (unverified) |
| Kwangmyung Industry | Blacklocks | South Korea | 9/6/2026 | ◌ Claimed (unverified) |
| Colonial Hyundai | Qilin | United States | 9/5/2026 | ◌ Claimed (unverified) |
| iwin | Black X | — | 9/1/2026 | ◌ Claimed (unverified) |
| KFZ-Meisterbetrieb Jost GmbH | Akira | Germany | 8/31/2026 | ◌ Claimed (unverified) |
| EP Manufacturing Bhd | The Gentlemen | Malaysia | 8/31/2026 | ◌ Claimed (unverified) |
| Neumaticos Corral S.A. | Qilin | — | 8/29/2026 | ◌ Claimed (unverified) |
| Air International Thermal Systems | Qilin | — | 8/26/2026 | ◌ Claimed (unverified) |
| Johnson City Honda | Global Secret Group | United States | 8/25/2026 | ◌ Claimed (unverified) |
| Difor | Qilin | — | 8/23/2026 | ◌ Claimed (unverified) |
| Rosedal Automotores | Krybit | Argentina | 8/19/2026 | ◌ Claimed (unverified) |
| Sam Pack Auto Group | Play | United States | 8/17/2026 | ◌ Claimed (unverified) |
Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.
Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.