🇷🇴Romania
Unknown•Ranked #59 of 199•score 10089% vs global avg·Top 30%
Ransomware
74
Top: qilin
Defacements
0
No defacements
Critical incidents
12
High-severity ransomware
Severity breakdown
- Crit48%
- High12%
- Med4590%
- Low00%
Ransomware activity over time
3 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-19868
SonicWall: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
Added 2026-11-06
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
Recent ransomware incidents in Romania
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-10-30 | iFink | Technology | qilin | MEDIUM |
| 2026-08-25 | SC PaderTeG Cabluri Electrice | Manufacturing | qilin | MEDIUM |
| 2026-08-25 | AGROLAND S.A. | Agriculture and Food Production | qilin | MEDIUM |
| 2026-08-09 | Harplast SRL | Manufacturing | qilin | MEDIUM |
| 2026-08-03 | Universitatea De Vest Vasile Goldi Din Arad | Education | qilin | MEDIUM |
| 2026-07-26 | Universitatea de Vest „Vasile Goldiș” din Arad | Education | qilin | MEDIUM |
| 2026-07-18 | sms-sme.com | Professional Services | lockbit5 | CRITICAL |
| 2026-07-12 | STEP Oiltools | Energy | dragonforce | MEDIUM |
| 2026-06-11 | fineconsulting | Business Services | incransom | MEDIUM |
| 2026-05-27 | Distrigaz Vest S.A. | Energy | incransom | MEDIUM |
Top targeted sectors
- Technology9
- Manufacturing9
- Education7
- Energy5
- Agriculture and Food Production4
Threat actors active here
- qilin9
- benzona4
- lockbit53
- apt733
- killsec3

