pwnsycybersecurity + privacy community

← All threat groups

Krybit 2026 activity

Ransomware group. 5 reports in 5 countries: 0 confirmed, 5 claimed or disputed. Latest 26 Aug 2026.

Vietnam · Singapore · Philippines · Thailand · Kenya

🎯 What sources say

🚨 Reports

OrganisationCountryDateSectorTypeActorWhat happenedSources
⚠️ ClaimedSanko Vietnam (sankovn.com)Vietnam26 Aug 2026ManufacturingRansomwareKrybit

Claimed. Krybit listed sankovn.com on its leak site on 26 August 2026.

ransomware.live✓ 7 Nov
⚠️ ClaimedProHealth (prohealth.sg)Singapore2 Aug 2026HealthRansomwareKrybit

Claimed. The Krybit group listed ProHealth (prohealth.sg) on its leak site on 2026-08-02.

ransomware.live✓ 7 Nov
⚠️ ClaimedLiberty Insurance CorporationPhilippines10 Jun 2026FinanceRansomwareKrybit

Claimed. Krybit listed libertyinsurance.com.ph on its leak site on 10 June.

Ransomware.live (Philippines)✓ 7 Nov
⚠️ ClaimedBangkok Metropolitan AdministrationThailand23 May 2026GovernmentRansomwareKrybit

Claimed. Krybit listed bangkok.go.th on its leak site and threatened to publish government data.

ransomware.live✓ 7 Nov
⚠️ ClaimedBomu HospitalKenya1 May 2026HealthRansomwareKrybit

Claimed. The Krybit group listed the Mombasa hospital on its leak site.

ransomware.live✓ 8 Nov

Leak-site listings are claims until the organisation or authorities confirm them. Methodology