Ransomware attacks reach record highs globally in 2026

Global ransomware activity reached a record high in August 2026, with 997 known or suspected attacks recorded. This represents an average of more than 32 incidents per day. The Qilin ransomware group emerged as the most active, claiming 157 victims, followed by The Gentlemen with 107 claimed victims.

The United States was the primary target, accounting for approximately 42 percent of total attacks with 417 incidents. Other significant targets included Germany and Italy, each with 48 attacks, the United Kingdom with 36, and Canada with 35. In Germany, the Berlin state government reportedly rejected a $2.3 million ransom demand from the Rhysida group, though recovery costs for compromised systems could reach as high as $116 million.

In Japan, the first half of 2026 saw a record 123 confirmed ransomware cases, the highest half-year total since tracking began in 2020. These cases were geographically dispersed across 35 of Japan’s 47 prefectures, with small and medium-sized enterprises accounting for 79 of the incidents.