The Gentlemen ransomware group overtakes Qilin as top threat in June 2026

In June 2026 the ransomware gang known as The Gentlemen claimed 94 victim organisations, pushing it ahead of Qilin which had held the top spot for five months. The change comes amid a broader rise in ransomware activity, with 707 companies in 87 countries hit in the month – a 9% increase over May.

Data for the second quarter of 2026 show 2,581 ransomware attacks overall. Qilin was linked to 299 attacks and The Gentlemen to 284, with DragonForce far behind. United States small‑ and medium‑sized businesses bore the brunt, suffering 769 incidents, followed by Canada (97), Germany (83) and the United Kingdom (74). Larger enterprises also saw a surge, with attacks on firms generating over $1 billion in revenue climbing 74% from the first quarter. Analysts attribute the spike to intensified rivalry between the two leading ransomware groups.