ThreatDown

42 previously unaffected countries experienced their first-ever ransomware attacks in the last 12 months.

Monthly volatility in ransomware attacks increased 50% year-over-year.

The number of active ransomware groups has doubled over the last three years.

The top ten ransomware groups now account for only 50% of attacks, which is down from 69% previously.

41 new ransomware groups have emerged between July 2024 and June 2025.

42 countries experienced their first ransomware incidents between July 2024 and June 2025.

A historic peak of over 1,000 recorded ransomware incidents occurred in February 2025 alone.

The United States remained the primary target, accounting for 47% of known ransomware attacks.

There has been a 46% increase in targeted countries by ransomware over three years.

There has been a 25% year-over-year increase in ransomware attacks from July 2024 to June 2025.

The number of active ransomware groups has exceeded 60 for the first time.