Ransomware Attacks on Technology in the UAE
Ransomware groups have claimed 13 technology organisations in the United Arab Emirates since 2020, which is 11.6% of all attributed UAE claims. Alphv accounts for 1 of them. The earliest claim in this sector was recorded on and the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. How this data is collected and filtered.
Which groups claim UAE technology organisations
All groups| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| Alphv | 1 | 7.7% | |
| Arcus Media | 1 | 7.7% | |
| Coinbase Cartel | 1 | 7.7% | |
| Crypto24 | 1 | 7.7% | |
| DarkVault | 1 | 7.7% | |
| DragonForce | 1 | 7.7% | |
| FunkSec | 1 | 7.7% | |
| Hunters | 1 | 7.7% | |
| INC Ransom | 1 | 7.7% | |
| LockBit 3.0 | 1 | 7.7% | |
| Lynx | 1 | 7.7% | |
| Spacebears | 1 | 7.7% | |
| Total (all rows) | 13 | 100% |
Showing the top 12 of 13 total.
How Technology claims spread across periods
UAE Technology carries 13 claimed organisations from 13 different ransomware groups, meaning no group has claimed a second technology target.
Technology ranks third among UAE sectors with 13 claimed organisations
Technology ranks third of 13 UAE sectors, above the average of 8.6 claims per active sector. The more useful figure is 13 distinct groups for 13 claims. No ransomware group in this dataset has claimed a second UAE technology organisation. That is the flattest distribution of any UAE sector on this site.
Thirteen groups account for 13 Technology claims
Technology shows exactly one claim per group across 13 distinct operations. No ransomware group in this dataset has claimed a second UAE technology organisation. That is the flattest distribution of any UAE sector on this site. It argues against the idea of a specialist actor working the sector.
Technology claims concentrated in the middle of the record. The sector saw 2 claims in 2023 and 5 in 2024. It then saw 4 in 2025, and the partial year 2026 stands at 2.
The 2024 peak coincided with the largest single rise in UAE claims overall. Technology therefore rose and fell with the wider UAE pattern rather than against it.
What this means for UAE organisations
- Discount actor attribution as a planning input here, because no group has repeated against UAE technology targets.
- Prioritise the exposures common to all 13 groups instead: external remote access, unpatched edge devices and credential reuse.
- Determine whether you supply Dubai government entities, because DESC ISR v3 then applies to you through the supply chain rather than directly.
- Work through the 13 control domains of DESC ISR v3 where that contractual reach exists, and keep the test evidence.
- Record how you meet UAE Personal Data Protection Law breach notification duties before an incident forces the question.
- Review what a customer environment would inherit from a compromise of your build and deployment systems.
