CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Ransomware Activity Trends and Victim Statistics in 2025

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Ransomware activity in 2025 saw a significant increase in reported victims compared to previous years, with 7,902 victims listed by Ransomware.live. Traditional ransomware syndicates remained active, alongside less organized groups like Scattered Spider, Lapsus$, and ShinyHunters. Qilin emerged as the most prolific group, claiming 1,001 victims, followed by Akira and Clop. The manufacturing, technology, and healthcare sectors were the most targeted industries. US victims accounted for half of the total reported incidents.

Timeline

  1. 23.12.2025 15:00 1 articles · 23h ago

    Increased Ransomware Activity and Victim Statistics in 2025

    In 2025, ransomware groups targeted a wide range of industries, with the manufacturing, technology, and healthcare sectors being the most affected. Qilin emerged as the most prolific group, followed by Akira and Clop. The total number of reported victims was 7,902, a significant increase from previous years.

    Show sources
    Open in new tab

Information Snippets

  • Ransomware.live reported 7,902 victims in 2025, a significant increase from 6,129 in 2024 and 5,336 in 2023.

    First reported: 23.12.2025 15:00
    1 source, 1 article
    Show sources

  • Qilin was the most prolific ransomware group in 2025, with 1,001 victims listed on its data leak site.

    First reported: 23.12.2025 15:00
    1 source, 1 article
    Show sources

  • Akira and Clop were the second and third most active ransomware groups, respectively.

    First reported: 23.12.2025 15:00
    1 source, 1 article
    Show sources

  • The manufacturing sector had the highest number of victims (930), followed by technology (893) and healthcare (529).

    First reported: 23.12.2025 15:00
    1 source, 1 article
    Show sources

  • US victims made up half of the total reported ransomware incidents in 2025.

    First reported: 23.12.2025 15:00
    1 source, 1 article
    Show sources