2025 Ransomware victim growth and sector concentration
Target Trend
Summary
Hide ▲
Show ▼
Ransomware activity stayed elevated in 2025, with 7,902 victims listed across 306 active groups, signaling sustained pressure on enterprise targets. The largest concentrations were in manufacturing, technology, and healthcare, showing that extortion remained broad but especially heavy in operational sectors.
Related Happenings
2025 Ransomware trend toward built-in Windows tooling and lower ransom payment rates
Target Trend
First: 17.03.2026 23:41
Last: 17.03.2026 23:41
Sources 1
About this happening:
**Ransomware operators** are increasingly leaning on **built-in Windows tooling** while **ransom payment rates** continue to decline across **2025**, weakening extortion returns f...
2025 Ransomware trend toward built-in Windows tooling and lower ransom payment rates
Target TrendAbout this happening: **Ransomware operators** are increasingly leaning on **built-in Windows tooling** while **ransom payment rates** continue to decline across **2025**, weakening extortion returns f...
Ransomware victim payment rates fall to record low as claimed attacks rise
Target Trend
First: 26.02.2026 16:00
Last: 26.02.2026 16:00
Sources 1
About this happening:
Ransomware victim payment rates fell to **28%** last year, a record low, even as claimed attacks rose **50% year over year**, signaling a widening gap between attack volume and re...
Ransomware victim payment rates fall to record low as claimed attacks rise
Target TrendAbout this happening: Ransomware victim payment rates fell to **28%** last year, a record low, even as claimed attacks rose **50% year over year**, signaling a widening gap between attack volume and re...
Ransomware victim payment rates hit record low as claimed attacks surged
Target Trend
First: 26.02.2026 16:00
Last: 26.02.2026 16:00
Sources 1
About this happening:
Ransomware victim payment rates **fell to 28%** last year, an all-time low, even as **claimed attacks** rose **50% year-over-year**. The divergence suggests extortion operations a...
Ransomware victim payment rates hit record low as claimed attacks surged
Target TrendAbout this happening: Ransomware victim payment rates **fell to 28%** last year, an all-time low, even as **claimed attacks** rose **50% year-over-year**. The divergence suggests extortion operations a...
Ransomware victim listings and active groups surge across 2025
Target Trend
First: 18.02.2026 13:30
Last: 18.02.2026 13:30
Sources 1
About this happening:
**Ransomware** victim listings climbed to **7,458** on leak sites in **2025**, while active groups reached **124**, signaling a broader and more fragmented extortion ecosystem.
Ransomware victim listings and active groups surge across 2025
Target TrendAbout this happening: **Ransomware** victim listings climbed to **7,458** on leak sites in **2025**, while active groups reached **124**, signaling a broader and more fragmented extortion ecosystem.
Ransomware leak-site postings surged across victim organizations in Q4 2025
Target Trend
First: 29.01.2026 15:01
Last: 29.01.2026 15:01
Sources 1
About this happening:
In **Q4 2025**, ransomware leak-site postings for **victim organizations** rose sharply, signaling stronger extortion pressure across affected targets. Postings were **up 50% quar...
Ransomware leak-site postings surged across victim organizations in Q4 2025
Target TrendAbout this happening: In **Q4 2025**, ransomware leak-site postings for **victim organizations** rose sharply, signaling stronger extortion pressure across affected targets. Postings were **up 50% quar...
Timeline
-
23.12.2025 15:00 2 articles · 5mo ago
2025 ransomware victim growth and sector concentration
Campaign Scope UpdateRansomware tracking data for 2025 showed 7,902 listed victims across 306 active groups, above the 6,129 victims listed in 2024 and the 5,336 listed in 2023. Manufacturing accounted for 930 victims, technology for 893, and healthcare for 529, indicating that extortion pressure remained broad while concentrating in major enterprise sectors; Qilin was reported as the most prolific group, with Akira second and Clop third.
Show sources
- Top Ransomware Trends of 2025 — www.infosecurity-magazine.com — 23.12.2025 15:00
- Top Ransomware Trends of 2025 — www.infosecurity-magazine.com — 23.12.2025 15:00