Manufacturing ransomware victim share rose to 22% with 40% incident growth
Trend
Summary
Hide ▲
Show ▼
Manufacturing organizations remained the most targeted ransomware cohort, accounting for 22% of victims and seeing disclosed incidents rise 40% year-over-year. The pattern stayed elevated across 2025-2026, making manufacturing the top ransomware sector for the fifth consecutive year. The regional shift toward Europe adds pressure for manufacturers with exposed operational environments and downtime-sensitive production.
Related Happenings
Mid-market ransomware victim concentration stays high as incidents rise
Trend
H score48
First: 18.08.2026 13:00
Last: 18.08.2026 13:00
Sources 1
About this happening:
Ransomware victimization remains heavily concentrated in mid-sized organizations with $10m-$1bn in revenue, keeping the mid-market in the crosshairs across North Ame...
Mid-market ransomware victim concentration stays high as incidents rise
TrendAbout this happening: Ransomware victimization remains heavily concentrated in mid-sized organizations with $10m-$1bn in revenue, keeping the mid-market in the crosshairs across North Ame...
The Gentlemen and Qilin continue a ransomware dominance battle in July 2026
Threat Actor Meta
H score27
First: 07.08.2026 11:20
Last: 07.08.2026 11:20
Sources 1
About this happening:
The Gentlemen and Qilin continued a ransomware dominance battle in July 2026, together accounting for 33% of claimed attacks and concentrating a large share of the...
The Gentlemen and Qilin continue a ransomware dominance battle in July 2026
Threat Actor MetaAbout this happening: The Gentlemen and Qilin continued a ransomware dominance battle in July 2026, together accounting for 33% of claimed attacks and concentrating a large share of the...
Ransomware victim concentration remained dominated by the top five operations
Trend
H score44
First: 21.07.2026 16:00
Last: 21.07.2026 16:00
Sources 1
About this happening:
Ransomware victimization remained concentrated across March 2025 to March 2026, with 7,551 public disclosed victims and the top five operations responsible for 44%...
Ransomware victim concentration remained dominated by the top five operations
TrendAbout this happening: Ransomware victimization remained concentrated across March 2025 to March 2026, with 7,551 public disclosed victims and the top five operations responsible for 44%...
Ransomware ecosystem fragments as new groups emerge weekly
Threat Actor Meta
H score47
First: 21.07.2026 16:00
Last: 21.07.2026 16:00
Sources 1
About this happening:
Ransomware operations are fragmenting and expanding, with more than one new group per week entering the market and increasing extortion volatility. As of June 2026...
Ransomware ecosystem fragments as new groups emerge weekly
Threat Actor MetaAbout this happening: Ransomware operations are fragmenting and expanding, with more than one new group per week entering the market and increasing extortion volatility. As of June 2026...
The Gentlemen ransomware gang's affiliate-driven rise to most-active RaaS operator
Threat Actor Meta
H score36
First: 17.07.2026 12:00
Last: 17.07.2026 12:00
Sources 1
About this happening:
The Gentlemen ransomware gang became the most-active ransomware-as-a-service operator over a three-month period, overtaking Qilin with 300 incidents. Its rise...
The Gentlemen ransomware gang's affiliate-driven rise to most-active RaaS operator
Threat Actor MetaAbout this happening: The Gentlemen ransomware gang became the most-active ransomware-as-a-service operator over a three-month period, overtaking Qilin with 300 incidents. Its rise...
Timeline
-
18.09.2026 11:00 2 articles · 0h ago
Manufacturing ransomware victims reach 22% as incidents rise 40% year over year
Industry Or Public Sector UpdateBlack Kite's manufacturing analysis found that manufacturing organizations accounted for 22% of all ransomware victims from April 2025 to March 2026, while disclosed manufacturing incidents increased about 40% year over year from January 1 to July 29, 2026. The report also said manufacturing was the most targeted ransomware sector for the fifth consecutive year, with Europe showing sharp victim growth and German manufacturers drawing especially heavy pressure.
Show sources
- Manufacturing Accounts for 22% of all Ransomware Victims — www.infosecurity-magazine.com — 18.09.2026 11:00
- Manufacturing Accounts for 22% of all Ransomware Victims — www.infosecurity-magazine.com — 18.09.2026 11:00