Undisclosed ransomware attacks in Q3 2024 increased by 11% year-over-year compared to Q3 2023.

1252 undisclosed ransomware attacks were recorded in Q3 2024.

Q3 2025 saw the emergence of 18 new ransomware groups.

Approximately 1,200 staff of the Pennsylvania Office of Attorney General had to use forced workarounds due to the cyberattack.

96% of all disclosed ransomware cases involved data exfiltration in Q3 2025.

The technology sector reported 28 ransomware attacks in Q3 2025.

The number of Disclosed Ransomware Attacks increased by 80% in Q3 2023 compared to Q3 2022.

Scattered Spider was detected in 22.0% of cybersecurity incidents over the last 12 months.

70% of organizations reported that they paid the ransom in 2023

Organizations in the education sector reported an average dwell time of about 5 weeks prior to a ransomware incident.

Organizations in the government sector reported an average dwell time of about 7 weeks prior to a ransomware incident.

Organizations experienced an average of 5 to 6 ransomware incidents over the last 12 months, marking a 25% decrease from nearly 8 incidents in 2024.

10% of organizations in the government sector experienced ransomware incidents annually.

The percentage of organizations experiencing 20 or more ransomware incidents annually increased from 0% to 3% year-over-year.

CDK Global reported a ransom payment of $50 million

The percentage of organizations that never paid a ransom increased from 9% last year to 30% this year

20% of organizations in the healthcare sector experienced ransomware incidents annually.

The finance sector had an average ransom payment of $3.8 million

GRIT observed 14 publicly disclosed ransomware attacks against state agencies, counties, and municipalities in Florida since July 2022.

In Q3 2025, manufacturing organizations experienced a 26% increase in ransomware attacks.