Geographic Exposure 15 Disclosed Incidents

Spain (ES) Threat Exposure Profile

Empirical ransomware telemetry and victim disclosures impacting entities in Spain. Tracking captures 15 organizations disclosed across darknet leak portals.

Active Ransomware Groups Impacting Spain

arcusmedia (3) qilin (2) lamashtu (2) apt73 (2) Emperador (1) akira (1) Bavacai (1) Majinahanashi (1)

Most Impacted Industry Sectors

Services (4) Manufacturing (3) Technology (3) Construction (1) Logistics (1) Government (1) Retail (1) Education (1)

Disclosed Incident Archive (15)

Disclosed	Victim Organization	Threat Actor	Sector
2026-10-07	Matadero Frigorífico Avinyó	qilin	Manufacturing
2026-10-06	EPTISA	qilin	Technology
2026-10-05	METROCOLOR S.A.	Emperador	Manufacturing
2026-10-03	The Official Collegeof Architects of León (COAL)	akira	Construction
2026-10-02	TRANS LOGROÑO SOCIEDAD ANONIMA	lamashtu	Logistics
2026-09-30	Fluge Audiovisuales	lamashtu	Services
2026-09-28	Juntadeandalucia	Bavacai	Government
2026-07-08	holidaypalace.com	apt73	Services
2026-07-06	GRUPO STARFOODS	Majinahanashi	Manufacturing
2026-06-29	Nfinite 9000 S.L.	Booba Project	Technology
2026-03-23	Beltran & Garcia Financial Investment SLU	nightspire	Services
2026-03-17	banak.com	apt73	Retail
2025-09-16	Grup Gestio	arcusmedia	Services
2025-07-27	CCI Torrevieja	arcusmedia	Technology
2025-05-17	Colegio de la Compania de Maria Vigo	arcusmedia	Education