7,655 Ransomware Claims in One Year: Group, Sector, and Country Breakdown (ciphercue.com)

CipherCue’s analysis of ransomware leak-site postings from March 2025 to March 2026 found 7,655 “victim claims” from 129 groups in 141 countries, averaging about 20 per day. The top group, Qilin, posted 1,179 claims, but the volume is widely distributed—five groups accounted for 40%—and many claims lack confirmed breach status, sector, or country attribution. The report says claimed victim targeting was concentrated in manufacturing and technology and that monthly claim volume rose about 40% in the second half of the period.