2026 Ransomware Report Reveals 7,551 Victims, 146 Active Groups, and Qilin’s 443% Surge

Black Kite's 2026 ransomware report documents a sharp increase in disclosed ransomware victims (7,551 between April 2025–March 2026) and actor proliferation (146 active groups), driven by outsized growth from actors like Qilin, widespread exploitation of enterprise platforms (including zero‑day/known CVEs), rising exposure of critical vulnerabilities and credential/stealer log leaks, and a geographic and sectoral spread that now heavily impacts manufacturing and mid‑market organizations worldwide.