Ransomware Attacks Reached a Record 2,627 in Q3 2026

Ransomware groups claimed or were linked to 2,627 attacks in the third quarter of 2026, the highest quarterly total recorded by Comparitech.

The total averaged nearly 29 attacks per day and represented a 29 percent increase from the second quarter and a 61 percent increase from the same period in 2025. Researchers confirmed 247 incidents and classified 2,380 as unconfirmed claims, an important distinction because leak-site posts are not independent proof.

Among confirmed attacks, 138 affected businesses, 53 government entities, 36 healthcare organizations and 20 educational institutions. The median ransom demand was $150,000, while the average was $602,400. Qilin and The Gentlemen were the most prolific groups in the dataset.

Comparitech also noted more triple-extortion tactics, where attackers pressure not only the original victim but its customers or partners. Resilience plans should account for stolen-data abuse after restoration, including notification, identity monitoring and communications with downstream organizations.