Ransomware Surge Driven by AI and Healthcare Data Threatens Global Cybersecurity

A Travelers cyber‑threat report for the first quarter of 2026 recorded the highest ransomware activity since the study began in 2020, with 84 criminal groups posting more than 2,400 victim companies on leak sites. The report notes that AI tools are now being used to craft perfectly worded phishing emails, generate deep‑fake video and voice content, and automate social‑engineering attacks, raising the volume and quality of ransomware campaigns.

TrendAI research shows that stolen healthcare records have become a premium commodity in a mature underground economy. Over the past year, thousands of forum posts and dark‑web listings linked to ransomware groups revealed that health data is sold for $65‑$8,000 per dataset, with ransomware demands on hospitals reaching up to $500,000. The supply chain is increasingly compromised through electronic health‑record software vendors, allowing attackers to harvest data from hundreds of downstream providers. Together, AI‑enhanced attacks and the lucrative market for patient data are fueling a global surge in ransomware threats.