Back to ransomware overview
Monthly ransomware reports
Each report breaks down one month of ransomware victims claimed on leak sites: the most active groups, the sectors and countries hit, groups seen for the first time, and day-by-day activity, all computed from the HackerFeeds dataset. The archive covers 62 months from September 2021 to October 2026, totalling 32,295 victims; the busiest complete month was August 2026 with 1,136 victims. Months with fewer than 100 recorded victims are not listed.
2026
8,080 victims across 10 months| Month | Victims | vs previous month |
|---|---|---|
| Ransomware attacks in October 2026 In progress | 471 | partial month |
| Ransomware attacks in September 2026 | 880 | −22.5% |
| Ransomware attacks in August 2026 | 1,136 | +13.3% |
| Ransomware attacks in July 2026 | 1,003 | +31.3% |
| Ransomware attacks in June 2026 | 764 | +3.0% |
| Ransomware attacks in May 2026 | 742 | −6.5% |
| Ransomware attacks in April 2026 | 794 | −0.6% |
| Ransomware attacks in March 2026 | 799 | +2.3% |
| Ransomware attacks in February 2026 | 781 | +10.0% |
| Ransomware attacks in January 2026 | 710 | −12.3% |
2025
7,976 victims across 12 months| Month | Victims | vs previous month |
|---|---|---|
| Ransomware attacks in December 2025 | 810 | +16.7% |
| Ransomware attacks in November 2025 | 694 | −12.2% |
| Ransomware attacks in October 2025 | 790 | +44.7% |
| Ransomware attacks in September 2025 | 546 | +4.6% |
| Ransomware attacks in August 2025 | 522 | +3.8% |
| Ransomware attacks in July 2025 | 503 | −7.9% |
| Ransomware attacks in June 2025 | 546 | +6.6% |
| Ransomware attacks in May 2025 | 512 | −13.7% |
| Ransomware attacks in April 2025 | 593 | −19.4% |
| Ransomware attacks in March 2025 | 736 | −30.2% |
| Ransomware attacks in February 2025 | 1,055 | +57.7% |
| Ransomware attacks in January 2025 | 669 | −5.6% |
2024
6,047 victims across 12 months| Month | Victims | vs previous month |
|---|---|---|
| Ransomware attacks in December 2024 | 709 | +12.7% |
| Ransomware attacks in November 2024 | 629 | −2.5% |
| Ransomware attacks in October 2024 | 645 | +53.6% |
| Ransomware attacks in September 2024 | 420 | −15.3% |
| Ransomware attacks in August 2024 | 496 | +11.0% |
| Ransomware attacks in July 2024 | 447 | +21.1% |
| Ransomware attacks in June 2024 | 369 | −31.0% |
| Ransomware attacks in May 2024 | 535 | +1.7% |
| Ransomware attacks in April 2024 | 526 | +9.6% |
| Ransomware attacks in March 2024 | 480 | +4.8% |
| Ransomware attacks in February 2024 | 458 | +37.5% |
| Ransomware attacks in January 2024 | 333 | −39.0% |
2023
5,381 victims across 12 months| Month | Victims | vs previous month |
|---|---|---|
| Ransomware attacks in December 2023 | 546 | +4.8% |
| Ransomware attacks in November 2023 | 521 | +11.1% |
| Ransomware attacks in October 2023 | 469 | −8.4% |
| Ransomware attacks in September 2023 | 512 | +10.1% |
| Ransomware attacks in August 2023 | 465 | −14.7% |
| Ransomware attacks in July 2023 | 545 | +21.7% |
| Ransomware attacks in June 2023 | 448 | +24.4% |
| Ransomware attacks in May 2023 | 360 | −33.2% |
| Ransomware attacks in April 2023 | 539 | +5.7% |
| Ransomware attacks in March 2023 | 510 | +77.7% |
| Ransomware attacks in February 2023 | 287 | +60.3% |
| Ransomware attacks in January 2023 | 179 | −66.5% |
2022
3,160 victims across 12 months| Month | Victims | vs previous month |
|---|---|---|
| Ransomware attacks in December 2022 | 534 | +73.9% |
| Ransomware attacks in November 2022 | 307 | +54.3% |
| Ransomware attacks in October 2022 | 199 | −11.6% |
| Ransomware attacks in September 2022 | 225 | +16.6% |
| Ransomware attacks in August 2022 | 193 | −10.6% |
| Ransomware attacks in July 2022 | 216 | +36.7% |
| Ransomware attacks in June 2022 | 158 | −37.1% |
| Ransomware attacks in May 2022 | 251 | −23.5% |
| Ransomware attacks in April 2022 | 328 | +4.1% |
| Ransomware attacks in March 2022 | 315 | +36.4% |
| Ransomware attacks in February 2022 | 231 | +13.8% |
| Ransomware attacks in January 2022 | 203 | −30.0% |
2021
1,651 victims across 4 months| Month | Victims | vs previous month |
|---|---|---|
| Ransomware attacks in December 2021 | 290 | −3.3% |
| Ransomware attacks in November 2021 | 300 | +15.8% |
| Ransomware attacks in October 2021 | 259 | −67.7% |
| Ransomware attacks in September 2021 | 802 | — |
Counts are victims publicly claimed on ransomware leak sites, as aggregated from ransomware.live, dated by publication date (UTC). Claims are not independently verified. See our methodology.