Skip to main content

Cybersecurity statistics / Threat Actors

Qilin was responsible for 59 finance-sector incidents in the past year.

PublisherBlack Kite
Report2026 State of Financial Services: The Dual Storm of Ransomware and Vendor Ecosystem Risk
Published3 June 2026
TopicsThreat Actors, Ransomware, Qilin, Financial Services

Published by Black Kite in 2026 State of Financial Services: The Dual Storm of Ransomware and Vendor Ecosystem Risk, 3 June 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

Qilin claimed more than 1,300 victims, nearly twice as many as its nearest rival.
Black Kite, 25/07/2026
Qilin claimed 15 attacks on the education sector in H1 2026, a 38% decrease from 24 claims in H2 2025, with three of Qilin’s attacks confirmed.
Comparitech, 25/07/2026
The Gentlemen claimed the most confirmed attacks (6) on the education sector, followed by Interlock (4) and Qilin and LockBit (3 each).
Comparitech, 25/07/2026
There were 146 active ransomware groups by June 2026, including 61 new groups entering during the reporting period.
Black Kite, 25/07/2026
Active ransomware groups increased 16% to 103 worldwide during the first half of 2026.
Forescout Technologies, 25/07/2026
The Gentlemen’s attacks on education increased 275% from H2 2025 to H1 2026.
Comparitech, 25/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.