🇸🇻El Salvador
Unknown•Ranked #90 of 199•score 489% vs global avg·Top 45%
Ransomware
12
Top: ransomhub
Defacements
0
No defacements
Critical incidents
0
High-severity ransomware
Severity breakdown
- Crit00%
- High18%
- Med1192%
- Low00%
Ransomware activity over time
1 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-19868
SonicWall: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
Added 2026-11-06
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
Recent ransomware incidents in El Salvador
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-09-24 | Catholic University of El Salvador | Education | Wallstreet | MEDIUM |
| 2025-10-29 | DILOSA FOOD COMPANIES | Agriculture and Food Production | incransom | MEDIUM |
| 2025-06-21 | DelCampo | Agriculture and Food Production | qilin | MEDIUM |
| 2025-01-27 | www.constelacion.com.sv | Technology | babuk2 | MEDIUM |
| 2025-01-15 | termopuerto.com | Transportation/Logistics | safepay | MEDIUM |
| 2024-12-21 | itca.edu.sv | Education | safepay | MEDIUM |
| 2024-11-14 | R Pac Central America S.A. de C.V. | Manufacturing | hunters | MEDIUM |
| 2024-10-08 | www.cenergica.com | Energy | ransomhub | MEDIUM |
| 2024-04-24 | [Published]Constelacion Savings and Credit Society | Financial Services | ransomhub | MEDIUM |
| 2024-04-23 | Ministerio de Desarrollo Local | Public Sector | rhysida | HIGH |
Top targeted sectors
- Education2
- Agriculture and Food Production2
- Technology2
- Financial Services2
- Transportation/Logistics1
Threat actors active here
- ransomhub4
- safepay2
- Wallstreet1
- incransom1
- qilin1

