Dragos Industrial Ransomware Analysis: Q3 2025

**Executive summary:** The Dragos Q3 2025 ransomware overview reports 742 incidents against industrial organizations globally, highlights dominant and emerging ransomware groups (notably Qilin, Akira, Play, INC and several new actors), documents confirmed operational impacts (e.g., Jaguar Land Rover, Asahi, Collins Aerospace), and emphasizes exploitation of internet-facing infrastructure and RMM/VPN vulnerabilities, credential and identity abuse, and ecosystem fragmentation that increases IT-to-OT risk.