CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Ransomware in 2026: More groups, more victims, no slowdown

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 3150

As cited

Copy frozen at (site build).

ransomware

Ransomware in 2026: More groups, more victims, no slowdown

Black Kite's 2026 Ransomware Report finds a fragmented ransomware landscape with 61 new groups entering the market between April 2025 and March 2026, averaging more than one new group per week. Unlike previous years defined by dominant actors or major incidents, 2026 shows multiple ransomware playbooks scaling simultaneously with no signs of slowdown.

Why it matters: Security teams face an expanding threat surface as ransomware group proliferation creates more operational variants and attack vectors to defend against and monitor.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary