Skip to main content
Cybersecurity Statistics

Cybersecurity statistics

LockBit was the most active ransomware variant in 2024, affecting 603 victims. May was the busiest month with nearly 200 attacks.

PublisherBlackFog
Report2024 State of Ransomware Annual Report
Published26 February 2025

Published by BlackFog in 2024 State of Ransomware Annual Report, 26 February 2025. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

Among publicly disclosed attacks, Qilin was responsible for 22 attacks (8%), ShinyHunters 16 attacks (6%), and INC 11 attacks (4%).
BlackFog, 27/05/2026
79 ransomware groups claimed victims during Q1 2026.
BlackFog, 27/05/2026
Among undisclosed ransomware attacks in Q1 2026, Qilin led with 339 attacks (16%), The Gentlemen 200 attacks (9%), and Akira 190 attacks (9%).
BlackFog, 27/05/2026
Government entities experienced 32 publicly disclosed ransomware attacks (12%) and the technology sector experienced 28 attacks (11%) in Q1 2026.
BlackFog, 27/05/2026
Healthcare accounted for 72 publicly disclosed ransomware attacks (27%) in Q1 2026.
BlackFog, 27/05/2026
There were 264 publicly disclosed ransomware attacks in Q1 2026, a 15% decrease year-on-year.
BlackFog, 27/05/2026

Get the newsletter

Weekly cybersecurity statistics by email.