Q3 2026 Ransomware Research Report: Ransomware increased 21.5% during Q3 2026. See who’s behind the attacks, who they target, and where.
Ransomware activity accelerated significantly in Q3 2026, reaching the highest levels observed during the annual reporting period. This report breaks down the latest ransomware trends, the most active threat actors, industry targeting patterns, and the geographic distribution of attacks worldwide.
Inside the report:
- Record attack volume: 3,133 ransomware incidents in Q3 2026, up 21.5% quarter-over-quarter
- More active groups: 125 active ransomware groups; a 17.9% increase, up from 106
- Shifting targets: Manufacturing became the most targeted industry, and Technology rose 76.1%
- Geographic focus: The United States remains the most impacted geography
Download the Q3 2026 Ransomware Research Report for the full analysis.
The CyberMaxx team of cyber researchers conducts routine threat research independent of client engagements. The purpose of our research is to help foster collective intelligence among the cybersecurity community.
While conducting their research, the team discovers and analyzes ongoing ransomware attacks occurring in the wild.