Ransomware needs a way in. Stolen credentials are the cheapest one.

SAYEGH Ransomware Attack

Ransomware victimRansomed

payloadGroup

LebanonCountry

Apr 1, 2026Discovered

Overview

View group profile

Industry

Education

Country

Lebanon

Discovered

6 months ago

Attack date

Apr 1, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

payload

Total victims

First seen

Feb 2026

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

102

Threat level

2.6/10

Aggressiveness6/10

Lethality0/10

Criticality1.7/10

Status breakdown

Claimed

this victim

100.0%78

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Education

Known target sector

Country

Lebanon

Not a listed target country

Other victims

View all (78)

Same group · payload

Boullard Musique
France
Claimed
Neeser Technik AG
Switzerland
Claimed
HWZ-Studiengänge
Switzerland
Claimed
Zara Investment Holding
Spain
Claimed
B&B Hydraulik
Germany
Claimed
Stücheli Architekten
Switzerland
Claimed

Group activity

Monthly attacks · payload

total · avg 8.7/mo