Coinbase Cartel Ransomware Activity in the UAE
Coinbase Cartel has claimed 6 organisations in the United Arab Emirates, which is 5.4% of all attributed UAE claims. Its activity concentrates in Financial Services, accounting for 2 of those claims. The first Coinbase Cartel claim against a UAE organisation was recorded on , the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. This page counts Coinbase Cartel claims only. How this data is collected and filtered.
Which UAE sectors Coinbase Cartel targets
| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| Financial Services | 2 | 33.3% | |
| Retail and E-Commerce | 2 | 33.3% | |
| Professional Services | 1 | 16.7% | |
| Technology | 1 | 16.7% | |
| Total | 6 | 100% |
When Coinbase Cartel claimed UAE organisations
Coinbase Cartel claimed 5 UAE organisations inside two months of late 2025, its first activity in the country on record.
Coinbase Cartel has claimed 6 UAE organisations
Coinbase Cartel ranks fourth of 47 groups on this tracker and appears across 4 distinct sectors. It had no UAE record before November 2025. Reaching the top five of an all-time table took the group a single quarter.
Five of the six claims fall inside late 2025
Leak-site monitoring recorded the first Coinbase Cartel claim against a UAE organisation on 4 November 2025. The group claimed 5 organisations before the end of that year. The most recent claim was recorded on 30 March 2026.
Five claims inside two months is the most compressed burst on this tracker. Coinbase Cartel had no UAE record before November 2025. A group can therefore reach the top five of an all-time table within a single quarter.
Financial Services and Retail and E-Commerce each account for 2 claims. Professional Services follows with 1, and the remaining claim falls in another sector.
What this means for UAE organisations
- Plan for arrival rate rather than for a known list, because Coinbase Cartel went from absent to fifth place in one quarter.
- Note the split between Financial Services and Retail and E-Commerce, which together carry 4 of the 6 claims.
- Establish whether DFSA Technology and Risk Management rules apply, which they do for firms authorised in the DIFC.
- Map your obligations under the UAE Personal Data Protection Law, which covers payment and identity records held at volume.
- Test the external perimeter on a schedule rather than after an incident, since a two-month burst leaves no time to react.
- Retain the results of those tests as evidence, because assessors ask for demonstration rather than description.
- Revisit this page as 2026 completes, given that the group remained active into March of that year.