The most targeted sector by the DoppelPaymer ransomware gang is, to no surprise, the manufacturing sector. This matches the overall findings of our research, according to which manufacturing is the most targeted sector in general, and across most geographic areas. However, the second most targeted sector by DoppelPaymer is the government and defense sector (which came 6th in the findings in Chapter 5 above), accounting for 12% of the total victims of the ransomware (16 victims). Closely examining the affected organizations in this sector reveals that most of them are from the Government Administration sub-industry, comprising mainly local governments entities. In addition, most of them are from the US, followed by France and Canada. Of note, these countries are also the most targeted countries by DoppelPaymer ransomware when taking into consideration the total 130 victims from all sectors targeted by the ransomware: the US is the most targeted country by DoppelPaymer (accounting for a total of 70 victims), followed by Canada (15 victims) and France (14 victims). This is also very similar to the overall results of our analysis (see chapter 3 above), where the US is the most targeted country, Canada is second and France forth. 7.2 DOPPELPAYMER: MOST TARGETED INDUSTRIES AND COUNTRIES DoppelPaymer: Most Targeted Industries 30% 12.31% 10.77% 10.77% 6.92% 4.62% 3.85% 3.85% 3.08% 3.08% 3.08% 2.31% 2.31% 2.31% 0.77% Manufacturing Government and Defense Financial Services Transportation Education Retail Energy Media Hospitality-Leisure Others Technology Healthcare Legal and Human Resources Pharmaceuticals and Chemicals NPO 30 | The Ransomware Landscape