Ransomware Intelligence

Dorotea Sweden Ransomware Attack

Ransomware victim

SwedenCountry

Apr 24, 2026Discovered

Overview

View group profile

Industry

Government & Defense

Country

Sweden

Discovered

4 months ago

Attack date

Apr 24, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

Total victims

212

First seen

Aug 2025

Last seen

Jul 2026

Group status

active

Sophistication

0

Impact score

121

Threat level

2.6/10

Aggressiveness5/10

Lethality0.3/10

Criticality2.5/10

Status breakdown

Data Leaked6.6%14

Negotiating0.5%1

Claimed

this victim

92.9%197

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Government & Defense

Known target sector

Country

Sweden

Frequently targeted country

Other victims

Same group · incransom

Group activity