ALPHV ransomware attacks in India

ALPHV (also tracked as blackcat) has posted 9 Indian organisations on its leak site since Jul 2023. Its latest Indian post was in Jan 2024. The sector it hits most often in India is manufacturing.

9Indian victims posted, all time
0in the past 12 months
Jul 2023first Indian post
Jan 2024latest Indian post

Indian victims by month

Nov 2024Nov 2025Oct 2026

Red bars are the past 12 months.

Sectors hit in India, all time

Indian victims by year

  • 20241
  • 20238

Other gangs active in India

Leak-site counts from ransomware.live’s public data for victims with country India, as of 16 Oct 2026. A post is a claim made by a criminal group, not a confirmed breach, and the real number of attacks is higher. Victims are never named on this site. See the method.