Ransomware Groups Claimed 2,000 Attacks in Just Three Months

Ransomware activity escalated sharply in 2025, with Cyble reporting 6,604 attacks (a 52% increase from 2024) and continued high activity into early 2026; the Russian RaaS group Qilin is identified as the top actor, and supply-chain exploitation (including Oracle E-Business Suite compromises) amplified impact across multiple industries. The report urges rapid patching, perimeter hardening, segmentation, endpoint protection, and stronger access controls to mitigate this elevated threat environment.