Ransomware Activity Report Reveals 36% Increase in Q3 Ransomware Attacks

Findings from BlackFog’s analysis of global ransomware activity from July to September across both publicly disclosed and non-disclosed attacks shows that publicly disclosed attacks continued to set new records, with 270 attacks, a 36% increase compared to the same quarter, Q3, in 2024 (198 attacks). This also represents a 335% increase since Q3 2020, underscoring the continued rise in ransomware attacks over the last five years. 

“This has been a quarter in which the fallout of cyberattacks has continued to have a long and lasting impact. From grounded aircraft and stranded passengers to manufacturers forced to halt production, the disruption has been significant,” says Dr. Darren Williams, founder and CEO of BlackFog. “At the other end of the scale, we’ve seen attackers pulling no punches when it comes to the type of company - and data - they target. As ransomware volumes show a continued upward trend, the best option for organizations is to make it as hard as possible for cybercriminals to take advantage of them. That means protecting data so that they have no leverage for extortion and, critically, no incentive to return.” 

Key takeaways:

·        Compared to the same period in previous years, there was a 50% increase in July with a total of 96 attacks; a 37% increase in August with a total of 92 attacks; and a 27% increase in September with a total of 85 attacks.

·        Between July and September, publicly disclosed attacks were attributed to 54 ransomware groups.

·        The quarter also saw the emergence of 18 new ransomware groups, several linked to high-profile incidents targeting large organizations.

·        When looking at attacks not disclosed publicly, the manufacturing sector was hit hardest, accounting for 22% of all incidents. 

·        Close behind was the services sector, with 333 incidents, while the construction industry entered the Top 3 for the first time with 143 attacks. The legal sector also saw a surge, recording 79 attacks, its highest level to date.