The State of Ransomware Q2 2026

Check Point Research’s State of Ransomware Q2 2026 reports that while the ransomware ecosystem remains concentrated, the number of active groups rose to a new high and the top 10 groups’ share fell to 57.6%; data leak sites recorded 2,139 victims (flat QoQ, +33% YoY), on-chain ransomware payments exceeded $820M in 2025 even as payment rates fell to ~23%, an internal leak revealed operational details (including AI-assisted tooling) for The Gentlemen, law enforcement targeted shared infrastructure and laundering services, and vulnerabilities are being weaponized within hours to days, accelerating attacks.