There were 200 publicly claimed manufacturing organizations that were victims of ransomware attacks in Q2 2025.

Qilin's victim count was 234 organizations and individuals.

There were 1,576 total public posts related to ransomware victims (organizations and individuals) in Q3 2025.

Qilin recorded 234 victims (organizations and individuals) in Q3 2025.

56.00% of global ransomware victims (organizations and individuals) in Q3 2025 were from the United States.

1.33% of global ransomware victims (organizations and individuals) in Q3 2025 were from Australia.

One individual's death was directly tied to the Qilin ransomware attack on Synnovis in June 2024.

Akira had 133 victims (organizations and individuals) in Q2 2025.

The emerging threat group 'The Gentlemen' posted 32 victims (organizations and individuals) on a single day once their data leak site went live in 2025.

Ransomware attacks on healthcare organizations accounted for 7.5% of all ransomware attacks in Q3 2025.

1.46% of global ransomware victims (organizations and individuals) in Q3 2025 were from Brazil.

2.60% of global ransomware victims (organizations and individuals) in Q3 2025 were from Italy.

2.35% of global ransomware victims (organizations and individuals) in Q3 2025 were from France.

Akira is among the top 3 ransomware outfits that impact organizations within the Technology vertical.

Qilin claimed 10 healthcare organizations as victims in Q3 2025.

GLOBAL and BlackLock had four distinct names in a little over a year.

IncRansom, SafePay, and Qilin together accounted for 30% of the 118 healthcare organizations that were victims in Q3 2025.

Qilin's activity marks a 318% YoY increase.

Qilin's 234 victims comprised 15% of the total ransomware victims (organizations and individuals) for Q3 2025.

There were 77 total ransomware groups active in Q3 2025.