Skip to main content

Cybersecurity statistics / Threat Actors

The number of distinct threat groups targeting finance increased from 37 in 2023 to 45 in 2024 and to 48 in 2025.

PublisherBlack Kite
Report2026 State of Financial Services: The Dual Storm of Ransomware and Vendor Ecosystem Risk
Published3 June 2026
TopicsThreat Actors, Financial Services

Published by Black Kite in 2026 State of Financial Services: The Dual Storm of Ransomware and Vendor Ecosystem Risk, 3 June 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

Qilin claimed more than 1,300 victims, nearly twice as many as its nearest rival.
Black Kite, 25/07/2026
Qilin claimed 15 attacks on the education sector in H1 2026, a 38% decrease from 24 claims in H2 2025, with three of Qilin’s attacks confirmed.
Comparitech, 25/07/2026
The Gentlemen claimed the most confirmed attacks (6) on the education sector, followed by Interlock (4) and Qilin and LockBit (3 each).
Comparitech, 25/07/2026
There were 146 active ransomware groups by June 2026, including 61 new groups entering during the reporting period.
Black Kite, 25/07/2026
Active ransomware groups increased 16% to 103 worldwide during the first half of 2026.
Forescout Technologies, 25/07/2026
The Gentlemen’s attacks on education increased 275% from H2 2025 to H1 2026.
Comparitech, 25/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.