Ransomware Threats in the Americas H1 2026: Dissecting the Regional Attack Patterns and Dominant Actors
Cyble's H1 2026 report attributes 2,188 of 3,836 global ransomware attacks (57%) to the Americas, with North America absorbing 1,981 incidents.
Cyble Research and Intelligence Labs tracked 3,836 ransomware incidents worldwide in the first half of 2026, with North and South America combining for 2,188 attacks, more than 57% of the global total. North America alone accounted for 1,981 attacks, driven by a mature multi-group Ransomware-as-a-Service economy competing for market share. The report dissects regional attack patterns and profiles the dominant ransomware actors across the two sub-regions.
- 2,188 of 3,836 tracked global ransomware attacks hit the Americas in H1 2026
- North America logged 1,981 attacks fueled by competing RaaS groups
- South American activity shows distinct patterns from the North American threat landscape
The Americas carried the heaviest ransomware burden of any region on the planet in the first half of 2026. According to Cyble Research and Intelligence Labs (CRIL), North and South America combined experienced 2,188 documented ransomware attacks between January and June 2026. That single figure — 2,188 attacks — represents more than 57% of the 3,836 ransomware incidents CRIL tracked worldwide, making the Americas the undisputed center of gravity for global ransomware operations. But the Americas is not a single threat theatre — it is two. North America alone absorbed 1,981 attacks, driven by a mature, multi-group Ransomware-as-a-Service (RaaS) economy competing for market share. South…
This source does not provide full text. Read it at cyble.com.