Among publicly disclosed attacks, Qilin was responsible for 22 attacks (8%), ShinyHunters 16 attacks (6%), and INC 11 attacks (4%).
| Publisher | BlackFog |
| Report | The State of Ransomware Q1 | 2026 |
| Published | 6 May 2026 |
| Topics | Ransomware, Ransomware Groups, Qilin, ShinyHunters, INC |
Published by BlackFog in The State of Ransomware Q1 | 2026, 6 May 2026. The figure is taken from the report as published; the full methodology is in the source.