The emerging threat group 'The Gentlemen' posted 32 victims (organizations and individuals) on a single day once their data leak site went live in 2025.

Akira had 133 victims (organizations and individuals) in Q2 2025.

Rhysida has claimed over 200 organizations and individuals as victims to their dark web DLS.

56.00% of global ransomware victims (organizations and individuals) in Q3 2025 were from the United States.

SafePay impacted 71 organizations and individuals across 19 industries and 16 countries in Q3 2025.

SafePay claimed 11 healthcare organizations as victims in Q3 2025.

Qilin recorded 234 victims (organizations and individuals) in Q3 2025.

The average number of public posts related to ransomware victims (organizations and individuals) per week in Q3 2025 was 121.

During Q3 2025, Akira claimed one healthcare industry organization as a victim on their DLS.

In Q2 2025, there were 92 reports of ransomware attacks on healthcare organizations.

Ransomware groups claimed 118 healthcare organizations as victims in Q3 2025.

Akira experienced a single day spike of 20 claimed victims (organizations and individuals) on August 11th 2025.

The United States accounted for 52.1% of global ransomware victims (organizations and individuals) in the prior quarter (Q2 2025).

2.03% of global ransomware victims (organizations and individuals) in Q3 2025 were from Spain.

In Q2 2025, ransomware attacks on healthcare organizations accounted for 5.8% of all ransomware attacks.

Qilin's victim count was 234 organizations and individuals.

3.81% of global ransomware victims (organizations and individuals) in Q3 2025 were from the United Kingdom.

Qilin claimed 56 victims (organizations and individuals) in Q3 2024.

IncRansom's Q3 2025 victim count was 126 organizations and individuals.

SafePay impacted 111 organizations and individuals spread across 27 industries and 18 countries in Q2 2025.