2025 Ransomware Threat Landscape: Impact on Korean Enterprises

This report analyzes 60 ransomware incidents affecting Korean corporations (including overseas subsidiaries) between November 2024 and October 2025 using data from ransomware dedicated leak sites and media. It documents a rising trend in attacks—monthly frequency increasing since 2023—with 56 attacks recorded through October 31, 2025, the emergence of 53 new ransomware groups in 2025, concentration of activity from various groups, and limitations in damage attribution due to undisclosed ransom payments and incomplete public reporting.