Healthcare ransomware attacks in India
64 Indian organisations in healthcare have been posted on ransomware leak sites since Apr 2023. In the past 12 months there were 23, 11% of all Indian victims, the 3rd most-hit sector. The most active group against it over that period: Krybit.
Victims by month
Red bars are the past 12 months.
Most active groups, past 12 months
Most active groups, all time
Victims by year
Where in India, past 12 months
Only states with at least 3 located victims are broken down.
Sectors are as tagged by ransomware.live. After an attack, organisations in India face several reporting deadlines at once: see the four clocks and who do you tell?
Other sectors
Leak-site counts from ransomware.live’s public data for victims with country India, as of 16 Oct 2026. A post is a claim made by a criminal group, not a confirmed breach, and the real number of attacks is higher. Victims are never named on this site. See the method.