Ransomware by the Numbers: Count of Victims and Groups Surge

Despite Some Well-Known Groups Disappearing, Ransomware Competition Remains Fierce Mathew J. Schwartz (euroinfosec) • January 15, 2026

Upheaval in the ransomware underground hasn't translated into fewer victims or digital extortion groups ready to launch new attacks.

See Also: How Staffing Reductions Increase Ransomware Risk

In fact, the opposite has occurred: more victims, and more cybercriminal groups unleashing crypto-locking software, according to independent analyses of the last 12 months in ransomware activity.

One set of numbers collected by RansomLook.io has the claimed victims in 2025 rising from 6,034 to 8,835, a nearly 50% increase, and the number of new groups debuting rise from 59 to 63. Another set, collected by Ransomware.live, tallied a 33% increase in victims, from 6,129 to 8,159, and new groups rising from 64 to 65. Cybersecurity firm Emisoft aggregated the numbers in a report.

Ransomware-tracking intelligence comes from counting ...