2.79% of global ransomware victims (organizations and individuals) in Q3 2025 were from Canada.

2.03% of global ransomware victims (organizations and individuals) in Q3 2025 were from Spain.

IncRansom had 71 victim claims (organizations and individuals) in Q1 2025.

IncRansom's Q3 2025 victim count was 126 organizations and individuals.

In Q2 2025, ransomware attacks on healthcare organizations accounted for 5.8% of all ransomware attacks.

Ransomware groups claimed 118 healthcare organizations as victims in Q3 2025.

During Q3 2025, Akira claimed one healthcare industry organization as a victim on their DLS.

The average number of public posts related to ransomware victims (organizations and individuals) per week in Q3 2025 was 121.

Toha personally profited over €7 million from trading malware, stolen data, and malicious access on his platform.

3.81% of global ransomware victims (organizations and individuals) in Q3 2025 were from the United Kingdom.

GRIT observed 14 publicly disclosed ransomware attacks against state agencies, counties, and municipalities in Florida since July 2022.

2.48% of global ransomware victims (organizations and individuals) in Q3 2025 were from the Republic of Korea.

Rhysida has claimed over 200 organizations and individuals as victims to their dark web DLS.

Akira experienced a single day spike of 20 claimed victims (organizations and individuals) on August 11th 2025.

IncRansom claimed 14 healthcare organizations as victims in Q3 2025.

The United States accounted for 52.1% of global ransomware victims (organizations and individuals) in the prior quarter (Q2 2025).

The 'The Gentlemen' group claimed 38 total victims (organizations and individuals) across the month of September 2025.

SafePay impacted 71 organizations and individuals across 19 industries and 16 countries in Q3 2025.

4.89% of global ransomware victims (organizations and individuals) in Q3 2025 were from Germany.

IncRansom had 62 victim claims (organizations and individuals) in Q2 2025.