Akira demonstrated a rise in activity with 13% more victims (organizations and individuals) in Q3 compared to Q2.

Qilin's 234 victims comprised 15% of the total ransomware victims (organizations and individuals) for Q3 2025.

2.79% of global ransomware victims (organizations and individuals) in Q3 2025 were from Canada.

Akira is among the top 3 ransomware outfits that impact organizations within the Technology vertical.

Akira had 150 victims (organizations and individuals) in Q3 2025.

22.29% of global ransomware victims (organizations and individuals) in Q3 2025 were from all other countries not specifically listed.

The average number of ransomware groups posting victim data per week in Q3 2025 was 25.

Akira's victim count in Q3 is 212% higher than the same period in 2024.

10% to 15% of revenue was offered as a split for the core operator within the RaaS ecosystem.

There were 252 publicly claimed manufacturing organizations that were victims of ransomware attacks in Q3 2025.

IncRansom had 71 victim claims (organizations and individuals) in Q1 2025.

There were 200 publicly claimed manufacturing organizations that were victims of ransomware attacks in Q2 2025.

SafePay claims a year-to-date total impact of 258 organizations and individuals across 29 distinct industries and 30 countries.

Manufacturing remains ransomware's number one target. It has held the number one position for the fourth year in a row.

For companies earning between $100 million and $300 million, manufacturing accounts for 30% of ransomware victims.

55% of respondents from healthcare organizations believe their organizations are vulnerable or highly vulnerable to a ransomware attack.

The costliest ransom paid (extrapolated value) by healthcare organizations was $1.2 million.

67% percent of healthcare organizations say ransomware attacks had a negative impact on patient care.

67% of healthcare organizations that experienced ransomware attacks say it resulted in longer lengths of patient stay.

There has been a 9% increase in ransomware attacks on manufacturing companies compared to the previous year.