Verified third-party cyber threat intelligence context · Qatar / Cyble
Cyber threat activity observed in Cyble’s Qatar reporting
Market context — not industry-specific evidence
Cyble’s public Qatar Threat Landscape Report 2025 describes 9 compromised access sales and 7 data breaches and leaks in its Qatar-focused observations. It also describes Qilin as the only active ransomware threat observed, responsible for 100% of observed ransomware attacks. These figures are third-party threat-intelligence observations; they are not official Qatar NCSA incident statistics, not a national incident register, not the percentage of Qatar businesses or organisations affected, and not industry-specific findings for the sector shown on this page.
Qilin among observed ransomware attacks
- Observed ransomware attacks attributed to Qilin
- 100%
- Unit
- percent
- Period
- Qatar-focused cyber threat intelligence observations described by Cyble for 2025; the public landing page does not publish a more granular observation window.
- Scope
- Cyble-observed Qatar-focused threat-intelligence records described in the Qatar Threat Landscape Report 2025
Cyble describes Qilin as the only active ransomware threat in its Qatar-focused reporting, responsible for 100% of observed ransomware attacks.
Cyble-observed ransomware context only; this is not official Qatar incident reporting and not the percentage of Qatar organisations experiencing ransomware.
Selected observed threat records
- Compromised access sales
- 9
- Unit
- observed records
- Period
- Qatar-focused cyber threat intelligence observations described by Cyble for 2025; the public landing page does not publish a more granular observation window.
- Scope
- Cyble-observed Qatar-focused threat-intelligence records described in the Qatar Threat Landscape Report 2025
- Data breaches and leaks
- 7
- Unit
- observed records
- Period
- Qatar-focused cyber threat intelligence observations described by Cyble for 2025; the public landing page does not publish a more granular observation window.
- Scope
- Cyble-observed Qatar-focused threat-intelligence records described in the Qatar Threat Landscape Report 2025
Selected Cyble-observed record counts only. These values are not official Qatar incident totals, organisation incident rates or industry-specific evidence.
Source: Cyble, Qatar Threat Landscape Report 2025
Scope: Cyble-published Qatar-focused threat-intelligence observations only. The public source states that BFSI and Retail together accounted for over 55% of the 9 compromised access sale listings; this combined-category observation is not rendered as Finance & Banking local-industry evidence. The source also states that data breaches and leaks most often impacted Education; this is not converted into a BilgeQor local-industry metric. These figures do not measure official Qatar incident totals, Qatar-organisation breach rates, compliance achievement, certification or security outcomes.
Methodology: Verified third-party threat-intelligence observation context from Cyble’s public Qatar Threat Landscape Report 2025 page. The public source states that Cyble observed 9 compromised access sales, with BFSI and Retail together accounting for over 55% of listings; 7 data breaches and leaks; and Qilin as the only active ransomware threat responsible for 100% of observed ransomware attacks. The admitted indicators describe Cyble-observed Qatar-focused threat-intelligence records only. They are not official Qatar National Cyber Security Agency incident statistics, not a national incident register, not a percentage of Qatar businesses or organisations identifying or experiencing cyber attacks, and not industry-specific performance, compliance, certification or security-outcome evidence. The combined BFSI and Retail observation is retained only in visible market-context disclosure and must not be converted into Finance & Banking local-industry evidence.
Accessible data table
| Metric | Value | Source | Scope | Reporting period |
|---|---|---|---|---|
| Observed ransomware attacks attributed to Qilin | 100% percent | Cyble, Qatar Threat Landscape Report 2025 | Cyble-observed Qatar-focused threat-intelligence records described in the Qatar Threat Landscape Report 2025 | Qatar-focused cyber threat intelligence observations described by Cyble for 2025; the public landing page does not publish a more granular observation window. |
| Compromised access sales | 9 observed records | Cyble, Qatar Threat Landscape Report 2025 | Cyble-observed Qatar-focused threat-intelligence records described in the Qatar Threat Landscape Report 2025 | Qatar-focused cyber threat intelligence observations described by Cyble for 2025; the public landing page does not publish a more granular observation window. |
| Data breaches and leaks | 7 observed records | Cyble, Qatar Threat Landscape Report 2025 | Cyble-observed Qatar-focused threat-intelligence records described in the Qatar Threat Landscape Report 2025 | Qatar-focused cyber threat intelligence observations described by Cyble for 2025; the public landing page does not publish a more granular observation window. |