Victim

Jaguar Land Rover

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 17, 2026 · last 3h ago

Timeline2 articles

Manufacturing Accounts for 22% of all Ransomware Victims

Black Kite finds manufacturing was the most ransomware-targeted sector for a fifth year, with incidents up roughly 40% and European victims growing 85.4%.

A Black Kite study reports manufacturing accounted for 22% of all ransomware victims from April 2025 to March 2026, the most-targeted sector for the fifth consecutive year. Disclosed manufacturing incidents rose from 847 to 1,183 between January 1 and July 29, 2026, with European victims up 85.4% (199 to 369) and Germany leading at 77. Researchers attribute European growth partly to SafePay's focus on German manufacturing, while Qilin (178 victims) and The Gentlemen (142) were the most active groups in early 2026. The 2025 Jaguar Land Rover attack, estimated to have cost the UK economy £1.9bn, illustrates the sector's financial exposure from downtime and IT-OT convergence.

Infosecurity Magazine08:00 UTC · 3h agoRansomware in the wild 4 sources

Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows

Black Kite reports manufacturing ransomware incidents up 40% in 2026, with new gang The Gentlemen responsible for 12% of attacks.

Black Kite's 2026 Manufacturing & Distribution Ransomware Report counted 1,183 disclosed incidents in the first seven months of 2026, a 40% year-over-year increase, led by Qilin, The Gentlemen, Akira, DragonForce, and INC Ransom. The Gentlemen, first observed in September 2025, claimed 142 manufacturing victims and was behind 12% of this year's attacks. European targeting grew 85%, with Germany (77), Italy (57), UK (43), and France (40) as top victims. The report cites the Jaguar Land Rover attack, estimated by the UK Cyber Monitoring Centre at £1.9 billion in impact with 4,000 announced job cuts, as the most economically damaging cyberattack in UK history.

SecurityWeekupdated 08:00 UTC · 3h agofirst Sep 17, 12:29 UTC · 22h agoRansomware in the wild 4 sources1

Appears with

threat actor Qilin 2 threat actor SafePay 2 vendor Black Kite 2 threat actor The Gentlemen 2 organization Bank of England 1 organization UK Cyber Monitoring Centre 1 threat actor Akira 1 victim Cleo 1 threat actor Clop 1 threat actor DragonForce 1 threat actor INC Ransom 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.