Technology ransomware attacks in India

111 Indian organisations in technology have been posted on ransomware leak sites since Oct 2020. In the past 12 months there were 46, 21% of all Indian victims, the 2nd most-hit sector. The most active group against it over that period: The Gentlemen.

111victims posted, all time
46in the past 12 months
21%of India’s victims in the past 12 months
Oct 2026latest post

Victims by month

77Nov 2024Nov 2025Oct 2026

Red bars are the past 12 months.

Most active groups, past 12 months

Most active groups, all time

Victims by year

  • 202634
  • 202542
  • 202425
  • 20234
  • 20223
  • 20212
  • 20201

Where in India, past 12 months

Only states with at least 3 located victims are broken down.

Sectors are as tagged by ransomware.live. After an attack, organisations in India face several reporting deadlines at once: see the four clocks and who do you tell?

Other sectors

Leak-site counts from ransomware.live’s public data for victims with country India, as of 16 Oct 2026. A post is a claim made by a criminal group, not a confirmed breach, and the real number of attacks is higher. Victims are never named on this site. See the method.