August 2026 Threat Trend Report on Ransomware

This August 2026 ransomware intelligence summary reports a surge in ransomware activity across multiple sectors—especially Information & Communication and Manufacturing—with the US heavily impacted. Major and emerging ransomware groups (e.g., Qilin, The Gentlemen, CL0P) conducted widespread campaigns, including a confirmed compromise of the ATF’s CALEA system by Qilin and CL0P’s exploitation of PTC Windchill/FlexPLM that added 42 global victims, underscoring active supply-chain attacks and ongoing large-scale threat actor operations.