Only 8.4% of organizations saw first-try deepfake simulation pass rates of 80% or above in deepfake-related cybersecurity training.

The average number of ransomware groups posting victim data per week in Q3 2025 was 25.

Akira's victim count in Q3 is 212% higher than the same period in 2024.

10% to 15% of revenue was offered as a split for the core operator within the RaaS ecosystem.

Nearly 19% of organizations that have lost money in a deepfake attack reported having lost half-a-million dollars or more.

IncRansom had 71 victim claims (organizations and individuals) in Q1 2025.

IncRansom claimed 14 healthcare organizations as victims in Q3 2025.

Akira experienced a single day spike of 20 claimed victims (organizations and individuals) on August 11th 2025.

Static image manipulation attacks represent 59% of deepfake threat vectors.

Toha personally profited over €7 million from trading malware, stolen data, and malicious access on his platform.

Email-based deepfake attacks represent 59% of deepfake threat vectors.

3.81% of global ransomware victims (organizations and individuals) in Q3 2025 were from the United Kingdom.

Qilin's 234 victims comprised 15% of the total ransomware victims (organizations and individuals) for Q3 2025.

Akira is among the top 3 ransomware outfits that impact organizations within the Technology vertical.

2.60% of global ransomware victims (organizations and individuals) in Q3 2025 were from Italy.

1.46% of global ransomware victims (organizations and individuals) in Q3 2025 were from Brazil.

Ransomware attacks on healthcare organizations accounted for 7.5% of all ransomware attacks in Q3 2025.

One individual's death was directly tied to the Qilin ransomware attack on Synnovis in June 2024.

Live voice-only call deepfake attacks currently account for 41% of deepfake threat vectors.

1.33% of global ransomware victims (organizations and individuals) in Q3 2025 were from Australia.