Ransomware activity in Turkey
25
Public victims
8
Active groups
8
Sectors hit
Most active groups
CRPxO (8) qilin (3) Doommageddon (2) krybit (2) blacknevas (2) nightspire (2) Deadlock (1) N0n (1)
Most affected sectors
Financial Services (4) Transportation (4) Manufacturing (4) Other (2) Professional Services (2) Healthcare (2) Technology (2) Government & Defense (1)
Recently listed organizations
| Organization | Sector | Listed |
|---|---|---|
| acilnet.com | Technology | 2026-09-20 |
| Zorlu Holding | Manufacturing | 2026-09-20 |
| AstraZeneca Türkiye | Healthcare | 2026-09-18 |
| www.harputyapi.com | Not Found | 2026-09-17 |
| Cumar Marble & Granite | Manufacturing | 2026-09-15 |
| i2i-systems | Technology | 2026-09-13 |
| Ozel & Ozel Laws Office | Professional Services | 2026-09-11 |
| Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efac | Manufacturing | 2026-09-08 |
| Yapı Merkezi | Manufacturing | 2026-09-07 |
| Uak University | Education | 2026-09-02 |
| Erdem Hospital | Healthcare | 2026-08-30 |
| SITTNAK Lojistik A.Ş. | Transportation | 2026-08-28 |
| Akpera Gayrimenkul Yatırım A.Ş. | Other | 2026-08-28 |
| Global Terminal Services | Transportation | 2026-08-19 |
| Tianji Auto Care Service Company | Transportation | 2026-08-12 |
| Akuur Law Firm | Professional Services | 2026-08-06 |
| Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm B | Hospitality | 2026-08-04 |
| KUVEYT TURK | Financial Services | 2026-07-31 |
| FINANSBANK | Financial Services | 2026-07-31 |
| ANADOLUBANK | Financial Services | 2026-07-31 |
| THY | Transportation | 2026-07-31 |
| DOĞAN HOLDİNG | Other | 2026-07-31 |
| ANADOLU SİGORTA | Financial Services | 2026-07-31 |
| ASELSAN | Government & Defense | 2026-07-31 |
| A101 | Retail & E-Commerce | 2026-07-31 |
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.