LockBit dethroned as leading ransomware gang for first time post-takedown

Following the NCA-led disruption of LockBit, NCC Group analysis shows a noticeable drop in LockBit postings while rival ransomware groups like Play, Hunters, and Ransomhub have increased activity; overall global ransomware activity fell month-on-month but rose year-on-year. The report highlights that North America and Europe remain the primary targets, that law enforcement disruption reduced LockBit's operational capacity, and warns that cybercriminal adoption of AI and shifting targeting to developing regions could sustain or change the threat landscape.