Ransomware activity in Mexico
47
Public victims
8
Active groups
8
Sectors hit
Source: Ransomware.live
Most active groups
qilin (9) thegentlemen (8) krybit (4) safepay (2) kazu (2) akira (2) lockbit5 (2) incransom (2)
Most affected sectors
Manufacturing (10) Retail & E-Commerce (7) Professional Services (4) Transportation (4) Agriculture and Food Production (4) Healthcare (3) Not Found (3) Hospitality (3)
Recently listed organizations
| Organization | Sector | Listed |
|---|---|---|
| grupoabg.com | Manufacturing | 2026-10-15 |
| bienestarempresarial | Professional Services | 2026-10-15 |
| Comisión Municipal de Agua Potable y Alcantarillado de Victoria | Energy & Utilities | 2026-10-13 |
| Ladrillera Mecanizada | Manufacturing | 2026-10-09 |
| MCM Telecom | Technology | 2026-10-08 |
| Grupo Industrial Tauro | Manufacturing | 2026-10-05 |
| The Official Collegeof Architects of León (COAL) | Professional Services | 2026-10-03 |
| The Official College of Architects of León (COAL) | Professional Services | 2026-10-02 |
| LA PONDEROSA | Agriculture and Food Production | 2026-10-01 |
| Don Hierro | Manufacturing | 2026-09-30 |
| auromex.com | Manufacturing | 2026-09-28 |
| XICO | Not Found | 2026-09-27 |
| Magnetos y Refacciones | Manufacturing | 2026-09-26 |
| Grupo MARSAN | Manufacturing | 2026-09-26 |
| Grupo Juste | Other | 2026-09-18 |
| sym.com.mx | Technology | 2026-09-17 |
| laconcepcion.com.mx | Retail & E-Commerce | 2026-09-15 |
| www.tender.mx | Government & Defense | 2026-09-12 |
| Mega Velocity | Transportation | 2026-09-05 |
| Trucka | Transportation | 2026-09-02 |
| tum.com.mx | Education | 2026-09-01 |
| transportesmontejo.com | Transportation | 2026-09-01 |
| Nutrypollo | Agriculture and Food Production | 2026-08-30 |
| Servicios Aereos Estrella | Transportation | 2026-08-30 |
| wittmann | Manufacturing | 2026-08-29 |
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.