RansomHub Ransomware Activity in the UAE
RansomHub has claimed 5 organisations in the United Arab Emirates, which is 4.5% of all attributed UAE claims. Its activity concentrates in Professional Services, accounting for 3 of those claims. The first RansomHub claim against a UAE organisation was recorded on , the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. This page counts RansomHub claims only. How this data is collected and filtered.
Which UAE sectors RansomHub targets
| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| Professional Services | 3 | 60% | |
| Manufacturing | 1 | 20% | |
| Transportation | 1 | 20% | |
| Total | 5 | 100% |
When RansomHub claimed UAE organisations
RansomHub claimed 5 UAE organisations inside ten months, three of them in Professional Services, and has recorded nothing since February 2025.
RansomHub has claimed 5 UAE organisations
RansomHub ranks seventh of 47 groups on this tracker and appears across 3 distinct sectors. That is a narrower range than most groups here show. Its whole UAE record fits inside a ten-month window that closed in February 2025.
RansomHub concentrated on Professional Services within a short window
Professional Services accounts for 3 of the 5 claims. Manufacturing and Transportation account for 1 each. Leak-site monitoring recorded the first claim on 2 May 2024 and the most recent on 15 February 2025.
The group claimed 4 organisations in 2024 and 1 in 2025. It has recorded nothing in the UAE during 2026. A ten-month active window makes RansomHub one of the more compressed profiles on this tracker.
Three of five claims in a single sector is a tighter concentration than most groups here show. The group still accounts for a small share of that sector overall. Professional Services draws more attackers than any other sector on this tracker.
What this means for UAE organisations
- Read this page as a closed window rather than current activity, because the record stops in February 2025.
- Note the Professional Services concentration, which is unusual against the even spread most groups on this tracker show.
- Treat client data as the asset at risk if you operate in that sector, because professional firms hold records belonging to others.
- Map your obligations under the UAE Personal Data Protection Law, which reaches client and employee records equally.
- Check whether DESC ISR v3 reaches you as a supplier of Dubai government data, bringing 13 control domains with it.
- Review third-party and remote access paths first, since professional firms connect outward to client environments by design.
- Compare this profile against the 2026 leaders, none of which had a UAE record while RansomHub was active.