Business & Professional Services — Cyber Threat Activity
Threat actors, incidents and malware targeting the Business & Professional Services sector — 2,894 recorded incidents and 100 tracked groups.
- Recorded incidents: 2,894
- Incidents, trailing 180 days: 709
- Tracked threat actors: 100
- Malware families: 1
Recent incidents
- Hilliard's Air Conditioning & Heating Inc 2026-08-06
- David King Architect 2026-08-06
- Oasis Legal Group 2026-08-05
- Brainhunter Companies LLC. and Brainhunter Systems Ltd. 2026-08-05
- Aptara 2026-08-05
- tomorrowsoffice.com 2026-08-05
- Henshaw Law 2026-08-05
- huntongroup.com 2026-08-05
- morrisgroupint.com 2026-08-05
- LCC 2026-08-04
- Integrated Site Management 2026-08-04
- SMS-SME 2026-08-03
- PCL Holding 2026-08-03
- pradotuylaw.com 2026-08-03
- DC Partner (Pty) Ltd 2026-08-02
- ASHA Microfinance Bank Limited (ASA Nigeria) 2026-08-02
- Moses & Singer 2026-08-02
- INTERTRUST AUSTRALIA PTY LTD 2026-08-02
- Evangelical Council for Financial Accountability (ECFA) 2026-08-02
- MTCO (Mahmoud Altaheni & Partners Trading Co) 2026-08-01
Threat actors targeting Business & Professional Services
- LockBit 198 incidents
- Akira 196 incidents
- RansomHub 187 incidents
- Qilin 182 incidents
- Play Ransomware 162 incidents
- INC Ransom 105 incidents
- DragonForce 92 incidents
- Black Basta 63 incidents
- Medusa Ransomware 62 incidents
- The Gentlemen 62 incidents
- Hunters International 58 incidents
- BianLian 54 incidents
- Lynx Ransomware 51 incidents
- 8Base 50 incidents
- BlackSuit 44 incidents
- SafePay 42 incidents
- Meow 36 incidents
- Cactus 33 incidents
- KillSec 31 incidents
- Cl0p 27 incidents
- Fog Ransomware 26 incidents
- Silent Ransom Group 24 incidents
- Deadlock 20 incidents
- ALPHV/BlackCat 19 incidents
Where these victims are
- United States 1,791
- United Kingdom 123
- Canada 96
- Germany 76
- France 55
- Australia 51
- Spain 45
- Italy 44
- Brazil 41
- Mexico 29
- India 24
- Singapore 22
Malware used against Business & Professional Services
Families used by the threat actors that target this sector, derived from actor tooling rather than observed in these incidents directly.
- RTM Malware
Coverage. 76.7% of incidents in our log carry a sector classification; the remainder name a victim we have not placed in an industry. Counts here are a floor, not a total, and are not comparable between sectors of different sizes.