Ransomware Report: Q4 2022

Executive summary: This Q4 2022 ransomware landscape report reviews sustained ransomware and data-leak extortion activity, noting 707 ‘tippers’ published in Q4 (2,549 for 2022), LockBit’s dominance despite an arrest, the emergence of the Royal group with dozens of victims, widespread use of data extortion and service-account abuse as an enabling TTP, and a forecast that ransomware and data-extortion activity will remain a major business risk into Q1 2023.