Agriculture and Food Production ransomware attacks in India

16 Indian organisations in agriculture and food production have been posted on ransomware leak sites since Dec 2022. In the past 12 months there were 5, 2% of all Indian victims, the 10th most-hit sector. The most active group against it over that period: The Gentlemen.

16victims posted, all time
5in the past 12 months
2%of India’s victims in the past 12 months
Jun 2026latest post

Victims by month

2Nov 2024Nov 2025Oct 2026

Red bars are the past 12 months.

Most active groups, past 12 months

Most active groups, all time

Victims by year

  • 20265
  • 20251
  • 20246
  • 20233
  • 20221

Where in India, past 12 months

Only states with at least 3 located victims are broken down.

Sectors are as tagged by ransomware.live. After an attack, organisations in India face several reporting deadlines at once: see the four clocks and who do you tell?

Other sectors

Leak-site counts from ransomware.live’s public data for victims with country India, as of 16 Oct 2026. A post is a claim made by a criminal group, not a confirmed breach, and the real number of attacks is higher. Victims are never named on this site. See the method.