Ransomware attacks up 40% in Q2 2026 as 28 new groups emerge

A BlackFog report covering April‑June 2026 shows a 40% year‑on‑year rise in undisclosed ransomware attacks, with 93 active groups in the quarter, including 28 newly formed ones. The United States faced the most incidents (169 disclosed attacks, 55% of the total) followed by Australia (54 attacks, 18%). Data exfiltration hit a record 97% of disclosed cases, averaging 508 GB stolen per undisclosed incident. Leading threat actors were Qilin (285 attacks), The Gentlemen (219) and Dragon Force (137); Shiny Hunters was the most active disclosed group with 28 incidents. A newly observed group, Settra, claimed 22 victims across seven countries within four days, suggesting pre‑existing infrastructure.

Separately, a comprehensive Windows‑antivirus review tested ten solutions over 45 days each. Bitdefender Total Security emerged as the top performer, achieving perfect malware detection, minimal system impact (2.7%), and built‑in ransomware protection. The review noted that ransomware attacks against Windows users surged 154% in the first eight months of 2026, underscoring the importance of effective endpoint security.