31 Victims for Public Sector in 2025


Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


 Manufacturing|  Construction |  Transportation/Logistics |  Technology |  Healthcare |  Financial Services |  Public Sector |  Business Services |  Retail |  Consumer Services |  Energy |  Telecommunication |  Agriculture and Food Production |  Hospitality and Tourism


This page lists all the victims of ransomware attacks in Ransomware.live database for Public Sector in 2025. We continously scrape ransomware group site to detect new victims.
Ransomware.live uses AI to identify the activity of victims, but please note that the results may not be 100% accurate—do not hesitate to contact us if you notice any errors.
BG flag

Supreme Administrative Court of Bulgaria 

Company logo
Ransomware Group:

Discovery Date: 2025-02-19 20:25
Estimated Attack Date: 2025-01-27

The Supreme Administrative Court provides for supreme judicial supervision over the precise and uniform application of laws in administrative justice. The Supreme Administrative Court hears complaints and protests against the actions of the Council of Ministers, the Prime Minister, Deputy Prime Ministers, Ministers, heads of other positions directly subordinate to the Council of Ministers, Acts of the Supreme Judicial Council, Acts of the Bulgarian Citizen Bank, Acts of Regional Regional Governing Acts, as well as other actions specified in the law; This is pronounced in disputes about the legality of taxes; It has reviewed the quality of judicial acts issued in administrative cases and is considering requests for annulment of compulsory courts' decisions in administrative cases.

Victim:   |  Group: 
ZM flag

Eservices.gov.zm 

Company logo
Ransomware Group:

Discovery Date: 2025-02-19 10:21
Estimated Attack Date: 2025-02-12

To the leadership of Zamservices We have compromised Eservices.gov.zm main servers, backup, internal network, we also exfiltrated all data before […]

Victim:   |  Group: 
 flag

www.cityoftarrant.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-15 16:35

[AI generated] City of Tarrant is the official website for the City of Tarrant, Alabama. It provides comprehensive information about various city services, department details, municipality codes, and ordinances. It acts as a communication bridge between citizens and local government, providing resources for business licenses, utility payments, and community event updates.

Victim:   |  Group: 
US flag

Northeast Delta Human Services Authority 

Company logo
Ransomware Group:

Discovery Date: 2025-02-15 12:20
Estimated Attack Date: 2025-02-09

NE Delta HSA is devoted to delivering programs and services that encourage citizens of Northeast Louisiana to reach their full human potential. Three tenets guide these efforts: excellent customer service, greater access to services and competent, quality care. We serve Caldwell, East Carroll, West Carroll, Ouachita, Lincoln, Madison, Franklin, Morehouse, Jackson, Tensas, Richland and Union Parishes

Victim:   |  Group: 
US flag

City of McKinney 

Company logo
Ransomware Group:

Discovery Date: 2025-02-15 12:19
Estimated Attack Date: 2025-02-09

McKinney Economic Development Corporation works in conjunction with the City of McKinney, Texas to promote and provide economic development for the city.

Victim:   |  Group: 
US flag

Bethany Lutheran Church 

Company logo
Ransomware Group:

Discovery Date: 2025-02-14 12:13

Bethany Lutheran is a dynamic church located just south of Grantsburg Wisconsin. You are invited to join us this Sunday for Sunday School from 9:30-10:30 AM (except during summer months). Educational programming for all ages. Followed by wors ...

Victim:   |  Group: 
US flag

snoqualmietribe.us 

Company logo
Ransomware Group:

Discovery Date: 2025-02-13 14:35

[AI generated] The Snoqualmie Tribe is an indigenous group in the Pacific Northwest of the US that is federally recognized since 1999. Located in Snoqualmie, Washington, the tribe operates a number of businesses such as the Snoqualmie Casino and invests in initiatives focused on environmental protection, education, and cultural preservation among other key areas. It aims to improve the wellbeing of its tribal members and the local community.

Victim:   |  Group: 
US flag

Central District Health Department 

Company logo
Ransomware Group:

Discovery Date: 2025-02-12 23:39

Central District Health Department is a company that operates in the Government industry in the field of health care. Central District Health Department corporate office is located in 1137 S Locust St, Grand Island, Nebraska, 68801, United States and has 119 employees. The total amount of data leakage is 84.40 GB

Victim:   |  Group: 
ZA flag

weathersa.co.za 

Company logo
Ransomware Group:

Discovery Date: 2025-02-12 10:14

[AI generated] Weathersa.co.za is South Africa's national weather service, providing the most up-to-date weather forecasts, warnings, and observations to the public. The service covers all regions of South Africa, offering detailed reports including temperature, rainfall, wind speed, humidity, and more. The company uses advanced meteorological technology to deliver accurate data useful for various sectors such as agriculture, tourism, and disaster management.

Victim:   |  Group: 
ES flag

ACCEM.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 14:28

[AI generated] Accem is a non-governmental organization based in Spain that specializes in providing assistance, services, shelter, and integration programs for refugees, immigrants, and displaced persons across various continents. They work to protect human rights and promote social interaction. Their goal is to improve the living conditions of people in vulnerable situations.

Victim:   |  Group: 
IL flag

Israel Police 

Company logo
Ransomware Group:

Discovery Date: 2025-02-09 11:41

To the self-proclaimed guardians of order in Israel, Your arrogance has been your downfall. Did you truly believe your digital fortresses were unassailable? That your firewalls, your protocols, and your illusions of security could keep us at bay? How naive. How tragically naive. Today, we stand before you not as a threat, but as a…

Victim:   |  Group: 
DE flag

GFZ Helmholtz Centre for Geosciences 

Company logo
Ransomware Group:

Discovery Date: 2025-02-04 21:12
Estimated Attack Date: 2025-02-01

Extract from Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Coffee

Victim:   |  Group: 
 flag

brewsterfiredepartment.org 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 21:22

[AI generated] "Brewster Fire Department" appears to be a fire and emergency service provider based in Brewster, likely in the United States. As a fire department, they are likely responsible for providing rapid, professional response to fires, medical emergencies, and other incidents that threaten public safety. They may also offer public educational programs focused on fire safety, emergency preparedness, and related topics. Note that more specific information may vary by location.

Victim:   |  Group: 
 flag

Denton Regional Suicide Prevention Coalition 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 14:41

With over 200 GB of files stolen , company has 100 hours to contact us before making files public . The Denton Regional Suicide Prevention Coalition came together in June 2014 as a response to the high number of suicides in our area. We are d ...

Victim:   |  Group: 
PK flag

Punjab.gov.pk 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 18:53

To The Organization of Punjab.gov.pk We have owned the servers and extract ed all data of all officers and Employees working

Victim:   |  Group: 
US flag

njcar.org 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:08

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
US flag

City Of Beloit 

Company logo
Ransomware Group:

Discovery Date: 2025-01-29 12:03

The beautiful and historic City of Beloit is located along Interstate 39/90, just north of the Wisconsin border. The City Center is located along the beautiful Rock River, while the new Gateway Business Park is easily accessible to the east side of Interstate 90.

Victim:   |  Group: 
IL flag

Israel Ministry of National Security 

Company logo
Ransomware Group:

Discovery Date: 2025-01-29 06:46

Ministry of National Security Hacked Happening now: 1- Hacking the comprehensive integrated management system of the regime’s shelters by Handala 2- Sound the red alert by Handala 3- People Go to shelters 4- Handala Close the Doors 5- Handala Play Kheybar Kheybar for Them 6- Handala Wipe the System 7- Plz Call 101 for saving…

Victim:   |  Group: 
ID flag

INDONESIA TAXPAYER IDENTIFICATION NUMBER (NPWP) 

Company logo
Ransomware Group:

Discovery Date: 2025-01-28 18:12

INDONESIA TAXPAYER IDENTIFICATION NUMBER (NPWP)

Victim:   |  Group: 
US flag

Carthage Police Department 

Company logo
Ransomware Group:

Discovery Date: 2025-01-28 17:09

Carthage Police Department Carthage Police Department

Victim:   |  Group: 
SG flag

sce.org.sg 

Company logo
Ransomware Group:

Discovery Date: 2025-01-28 12:44

The Singapore Cooperation Enterprise (SCE) was set up by the Ministry of Trade and Industry and the Ministry of Foreign Affairs of Singapore in 2006 to respond effectively to the multitude of foreign requests interested in Singapores development experience. SCE works closely with Singapores 16 ministries and over 60 statutory boards to scope out and tailor possible solutions to match the needs of foreign governments, and help meet their development objectives. SCE also serves as the focal point of access to expertise from Singapore across its public agencies. SCE is currently an integrated arm of Enterprise Singapore , the Singapore government agency championing enterprise development and supporting the growth of Singapore as a hub for global trading and startups. Our mission is to lead in public sector collaboration projects with foreign countries, so as to build long-term partnerships with foreign governments and generate economic spin-offs for Singapores private sector

Victim:   |  Group: 
MX flag

zapopan.gob.mx 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 08:16

zapopan.gob

zapopan.gob.mx has been previously claimed by Funksec for an attack estimated on 2025-01-13.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
JO flag

carc.gov.jo 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 08:14

carc.gov

carc.gov.jo has been previously claimed by Funksec for an attack estimated on 2025-01-09.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
MK flag

skopje.gov.mk 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 08:06

skopje.gov.mk

skopje.gov.mk has been previously claimed by Funksec for an attack estimated on 2024-12-14.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
MN flag

rtdc.gov.mn 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 08:05

rtdc.gov.mn access

rtdc.gov.mn has been previously claimed by Funksec for an attack estimated on 2024-12-17.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
PK flag

pbos.gov.pk 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 08:04

pbos.gov.pk

pbos.gov.pk has been previously claimed by Funksec for an attack estimated on 2024-12-17.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
IN flag

punjab.gov.in 

Company logo
Ransomware Group:

Discovery Date: 2025-01-26 13:37

[AI generated] Punjab.gov.in is the official online portal of the Government of Punjab in India. The website is designed to provide a comprehensive source of information about the government's various departments, initiatives, services, and policies. It offers online services like bill payments, applications, and complaints. It strives to enhance the government's transparency and the convenience of citizens, facilitating various digital services under one platform.

Victim:   |  Group: 
NG flag

www.lnrbda.gov.ng 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 16:43

5MB

Victim:   |  Group: 
PK flag

punjab.gov.pk 

Company logo
Ransomware Group:

Discovery Date: 2025-01-23 13:38

[AI generated] The "punjab.gov.pk" is not a company. It's the official website of the Government of Punjab, Pakistan. It provides a platform for e-governance and hosts information regarding various departments, policies, services and latest updates of the government. It's intended to increase transparency and efficiency in delivering government services to citizens.

Victim:   |  Group: 
AU flag

Christian Community Aid 

Company logo
Ransomware Group:

Discovery Date: 2025-01-22 04:46

CCA is a non-denominational service provider to the local communities. Contents: Valuable information (.jpg, .mp4, .mov, .xls, .doc, .mdf, .msg, .pdf... etc) https://ccas.org.au/

Victim:   |  Group: 
BD flag

navy-mil-bd 

Company logo
Ransomware Group:

Discovery Date: 2025-01-21 22:49

The Bangladesh Navy is the naval warfare branch of the Bangladesh Armed Forces, responsible for the defence of Bangladesh's 118,813 square kilometres of maritime territorial area from any external threat, the security of sea ports and exclusive economic zones of Bangladesh. Bangladesh Navy is a front line disaster management force in Bangladesh.

Victim:   |  Group: