Europe accounted for 18% of total global ransomware attacks (159) in February 2025.

Ransomware attacks in the Industrials sector increased from 149 in January to 191 in February 2025.

Consumer Discretionary was the most targeted sector with 278 ransomware attacks in February 2025, accounting for 31% of all attacks.

RansomHub was the second most active ransomware group, with 87 attacks in February 2025.

February ransomware attacks (886) increased by 119% compared to February 2024 (403).

North America accounted for 65% of total global ransomware attacks (574) in February 2025.

Industrials was the second most targeted sector, with 191 ransomware attacks in February in 2025.

South America accounted for 5% of ransomware attacks (42) in February 2025.

Play was the fourth most active ransomware group, with 43 attacks in February 2025.

Asia was the third most attacked place, with 7% of ransomware attacks (64) in February 2025.

Global levels of ransomware attacks increased month-on-month and year-on-year in February 2025.

Global levels of ransomware attacks increased month-on-month and year-on-year in February 2025.

More than 1 in 3 (38%) of security professionals predict that ransomware will become even more dangerous when powered by AI.

Only 29% of security professionals report being very prepared for ransomware attacks.

The number of victims claimed by Clop (Cl0p) saw a 300% jump from the previous month.

Out of the 962 victims claimed in February 2025, 335 were claimed by the Clop (Cl0p) group.

There has been a 264% increase in ransomware attacks on healthcare since 2018.

February 2025 was the single worst month in ransomware history based on the total number of claimed victims.

February 2025 saw a total of 962 victims claimed by ransomware groups.

There was a staggering 126% increase in claimed ransomware victims year-over-year, from 425 victims in February 2024 to 962 in February 2025.