ThreatDown

42 previously unaffected countries experienced their first-ever ransomware attacks in the last 12 months.

Monthly volatility in ransomware attacks increased 50% year-over-year.

The top ten ransomware groups now account for only 50% of attacks, which is down from 69% previously.

41 new ransomware groups have emerged between July 2024 and June 2025.

A historic peak of over 1,000 recorded ransomware incidents occurred in February 2025 alone.

42 countries experienced their first ransomware incidents between July 2024 and June 2025.

There has been a 46% increase in targeted countries by ransomware over three years.

There has been a 25% year-over-year increase in ransomware attacks from July 2024 to June 2025.

The number of active ransomware groups has exceeded 60 for the first time.

The number of active ransomware groups has doubled over the last three years.

The United States remained the primary target, accounting for 47% of known ransomware attacks.