# Global ransomware attack trends and evolution > Live situation record from CLSTR: https://clstr.news/situations/global-ransomware-attack-trends-and-evolution > Updated: 2026-10-23T16:47:43.000Z. Sources: 8. Developments: 2. Ransomware attacks reached record levels in the third quarter of 2026, with 2,627 total incidents reported. All four key sectors saw significant increases, led by a 50 percent rise in the education sector. The United States was the most targeted region, accounting for 41 percent of all attacks, while India and Argentina experienced substantial growth in incident rates. Research indicates that attackers are rapidly exploiting high-severity vulnerabilities, often within three days of public disclosure. Approximately 79 percent of exploited high- and critical-severity vulnerabilities required no authentication or user interaction. The threat landscape is further evolving through the use of post-quantum cryptography (PQC). The Kyber ransomware group has been identified as the first to deploy NIST-standardized PQC in active attacks, specifically targeting an American defense contractor. Additionally, the healthcare sector has seen a surge in activity, with 317 ransomware events recorded in the third quarter, representing 9.72 percent of all critical infrastructure ransomware events. Groups such as ShinyHunters are also shifting tactics toward identity and SaaS-access extortion, using domain impersonation and voice phishing to steal credentials rather than traditional file encryption. ## Timeline ### 2026-10-23: Cybersecurity threats escalate with post-quantum ransomware and record healthcare attacks Cybercriminals are adopting post-quantum cryptography via the Kyber ransomware group, while the healthcare sector faces a record 317 ransomware attacks in Q3 2026. 3 sources. https://clstr.news/cluster/cybersecurity-threats-escalate-with-post-quantum-ransomware-and-record-healthcare-attacks ### 2026-10-21: Ransomware attacks reach record high in Q3 2026 Ransomware attacks hit a record 2,627 in Q3 2026, with the US most affected. Attackers are now exploiting high-severity vulnerabilities within an average of three days of public disclosure. 4 sources. https://clstr.news/cluster/ransomware-attacks-reach-record-high-in-q3-2026 --- Cite as: Global ransomware attack trends and evolution. CLSTR, https://clstr.news/situations/global-ransomware-attack-trends-and-evolution