2026 Ransomware and Cyber Threat Report
The 2026 Ransomware and Cyber Threat Report reveals a record-breaking year with a 58% year-over-year increase in ransomware victims, totaling 7,515 publicly posted victims across 124 distinct named groups. Manufacturing, technology, retail and healthcare industries remained the most targeted sectors, while the United States accounted for 55.37% of all victims. The report highlights the continued evolution of threat actors incorporating AI/LLM technologies into their operations, though concerns about fully autonomous attacks remain overstated. Despite law enforcement disruption efforts, former mid-tier groups like Qilin and Akira have stepped up to fill gaps left by dismantled operations.
In this guide, you'll explore
- Record 58% year-over-year increase in ransomware victims with 7,515 total publicly posted victims
- 124 distinct named ransomware groups tracked, a 41% increase from 2024's 88 groups
- Manufacturing industry most impacted with 1,060 victims, accounting for 14% of all attacks
- United States dominated victim geography with 4,161 victims representing 55.37% of global total
- Threat actors increasingly incorporating AI/LLM technologies while law enforcement disruption efforts continue