🇭🇷Croatia
Ransomware
31
Top: qilin
Defacements
0
No defacements
Critical incidents
5
High-severity ransomware
Severity breakdown
- Crit516%
- High13%
- Med2581%
- Low00%
Ransomware activity over time
3 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-114713
UnrealIRCd: UnrealIRCd Improper Neutralization of Delimiters Vulnerability
Added 2026-11-13
- CVE-2026-123039
Check Point: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
Added 2026-11-13
- CVE-2026-124194
Microsoft: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Added 2026-11-10
- CVE-2026-111793
Openwave Messaging Limited: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
Added 2026-11-10
- CVE-2026-20320
Cisco: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
Added 2026-11-10
Recent ransomware incidents in Croatia
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-10-09 | Ministarstvo poljoprivrede, šumarstva i ribarstva | Agriculture and Food Production | Barracuda | MEDIUM |
| 2026-09-14 | Iveta | Not Found | thegentlemen | MEDIUM |
| 2026-09-12 | meridian16.hr | Professional Services | krybit | MEDIUM |
| 2026-07-25 | Plitvička Jezera Nacionalni Park | Hospitality | qilin | MEDIUM |
| 2026-07-10 | Eko-Flor Plus d.o.o. | Agriculture and Food Production | Deadlock | MEDIUM |
| 2026-06-15 | Ministarstvo zdravstva Republike Hrvatske | Public Sector | thegentlemen | MEDIUM |
| 2026-06-12 | jastrebarsko.hr | Not Found | threeam | MEDIUM |
| 2026-04-18 | Altpro | Not Found | coinbasecartel | MEDIUM |
| 2026-03-16 | rovinj-rovigno.hr | Hospitality and Tourism | lockbit5 | CRITICAL |
| 2025-12-15 | Region of Istria | Public Sector | qilin | MEDIUM |
Top targeted sectors
- Business Services5
- Transportation/Logistics5
- Agriculture and Food Production4
- Not Found4
- Public Sector2
Threat actors active here
- qilin4
- lockbit33
- ElDorado3
- thegentlemen2
- 8base2

