Cybersecurity statistics / Ransomware
| Publisher | ReliaQuest |
| Report | Ransomware and Cyber Extortion in Q2 2026 |
| Published | 16 July 2026 |
| Topics | Ransomware, Threat Actors, The Gentlemen, Actor Activity |
Published by ReliaQuest in Ransomware and Cyber Extortion in Q2 2026 , 16 July 2026. The figure is taken from the report as published; the full methodology is in the source.
| In H1 2026, one government entity confirmed it paid a ransom while 16 government entities said they did not pay. Comparitech, 19/07/2026 |
| The Gentlemen posted 101 victims in April, 77 in May, and 122 in June. ReliaQuest, 19/07/2026 |
| Deadlock emerged in June 2026 with 75 named victims in a single month. ReliaQuest, 19/07/2026 |
| Deadlock was absent from public data-leak sites for 11 months before emerging publicly. ReliaQuest, 19/07/2026 |
| Qilin fell from 111 data leak posts in April to 79 in June, a 29% decrease. ReliaQuest, 19/07/2026 |
| The median ransom demand in H1 2026 was $100,000, which is one-fifth of the H2 2025 median of $500,000. Comparitech, 19/07/2026 |
Weekly cybersecurity statistics by email.