Q3 2026 Sets New Record for Ransomware Attacks
Comparitech recorded a record 2,627 claimed ransomware attacks in Q3 2026, up 27% from Q2, led by Qilin and The Gentlemen with triple extortion rising.
Comparitech counted 2,627 claimed ransomware attacks between July and September 2026, a 27% rise on Q2 and 61% year-over-year, with only 247 confirmed by affected entities. Finance (+72%) and technology (+70%) saw the fastest growth, and the US led with 1,066 attacks (41% of the total). Qilin (357) and The Gentlemen (342) were the most active groups, while Clop surged 4,700% to 48 attacks. Average demand was $602,400; Everest's $12.3M demand on Stadler Rail ended with 201 GB leaked after refusal, and Rhysida published 5.7 TB of stolen Berlin state data including citizens' personal information.