One Country Absorbed Nearly Half of the World’s Ransomware Attacks in Just Six Months – The United States

Cyble Research and Intelligence Labs reports that North America — and the United States in particular — experienced a disproportionate share of global ransomware activity in H1 2026 (1,721 U.S. incidents of 3,836 worldwide). The analysis attributes much of the volume to a concentrated RaaS ecosystem (notably Qilin, Akira, and INC Ransom), identifies targeted sectors (professional services, construction, manufacturing, healthcare, technology, BFSI), highlights active use of known and zero‑day flaws (including Ivanti and Palo Alto products), and warns that initial‑access markets and hacktivist-linked data dumps are amplifying risk to critical supply chains and high-value organizations.