Ransomware activity in Mexico
62
Public victims
8
Active groups
8
Sectors hit
Source: Ransomware.live
Most active groups
qilin (16) thegentlemen (10) krybit (5) direwolf (3) safepay (3) lockbit5 (3) clop (2) emperador (2)
Most affected sectors
Manufacturing (13) Retail & E-Commerce (7) Not Found (6) Professional Services (5) Transportation (5) Healthcare (5) Technology (4) Other (4)
Recently listed organizations
| Organization | Sector | Listed |
|---|---|---|
| uaa.mx | Education | 2026-10-31 |
| Grupo Sanirent | Healthcare | 2026-10-31 |
| Angeles Contractor | Manufacturing | 2026-10-31 |
| Cipsa Industrias Sa De Cv | Manufacturing | 2026-10-30 |
| Sistemas Visuales 360 | Technology | 2026-10-30 |
| Farmacia I | Healthcare | 2026-10-30 |
| Grupo Ciosa, SAPI de CV | Other | 2026-10-30 |
| Innoe Asesores | Professional Services | 2026-10-30 |
| susannecerda.com | Not Found | 2026-10-29 |
| GRUPO PETROIL | Energy & Utilities | 2026-10-27 |
| TRANSPORTES JIMENEZ and REYES JIM REY S.A. | Transportation | 2026-10-26 |
| grupoeuro.com.mx | Manufacturing | 2026-10-24 |
| Revi Group | Other | 2026-10-23 |
| SEPIVER | Not Found | 2026-10-22 |
| Salauno | Not Found | 2026-10-19 |
| grupoabg.com | Manufacturing | 2026-10-15 |
| bienestarempresarial | Professional Services | 2026-10-15 |
| Comisión Municipal de Agua Potable y Alcantarillado de Victoria | Energy & Utilities | 2026-10-13 |
| Ladrillera Mecanizada | Manufacturing | 2026-10-09 |
| MCM Telecom | Technology | 2026-10-08 |
| Grupo Industrial Tauro | Manufacturing | 2026-10-05 |
| The Official Collegeof Architects of León (COAL) | Professional Services | 2026-10-03 |
| The Official College of Architects of León (COAL) | Professional Services | 2026-10-02 |
| LA PONDEROSA | Agriculture and Food Production | 2026-10-01 |
| Don Hierro | Manufacturing | 2026-09-30 |
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.