Ransomware Threats In The Americas H1 2026: Deep Dive

CRIL's H1 2026 Americas intelligence finds 2,188 documented ransomware attacks concentrated in North America (1,981) and South America (207), with the United States enduring 1,721 attacks; five groups (Qilin, Akira, INC Ransom, Dragonforce, The Gentlemen) account for ~52.5% of regional activity. The report details sectoral impacts (construction, manufacturing, professional services, healthcare, agriculture), cross-border supply-chain and OT/IT risks, active exploitation including zero-day campaigns (CL0P), large-scale data breaches (alleged Serasa breach), mobile banking trojans in Brazil, and provides prioritized defensive phases for patching, data protection, operational resilience, and named-actor threat-hunting.