Ransomware Surge: A Record Year

2025 set a new precedent for ransomware incidents, as reported by GuidePoint Security’s latest findings. Their annual report, released by the GuidePoint Research and Intelligence Team (GRIT), shows a concerning 58% increase in ransomware victims compared to the previous year. This makes 2025 the most active year yet for such attacks.

Jason Baker, Lead Threat Analyst at GuidePoint Security, highlighted how the persistent efforts by law enforcement haven’t stemmed the tide. Instead, the splintering of criminal entities has led to more frequent and large-scale attacks. The Qilin group has notably outpaced the infamous LockBit, becoming the most aggressive group tracked by GuidePoint.

Key Insights from the Latest Report

• Q4 of 2025 saw 2,287 ransomware targets, the highest since records began.
• The number of active ransomware groups grew to 124, a 46% increase from 2024.
• The U.S. remains a major target, with 55% of attacks aimed at American entities.
• The Manufacturing sector was hardest hit, with Technology and Retail/Wholesale not far behind.
• December 2025 was notably active, with 814 attacks—up 42% year-over-year.

Significantly, hackers are leveraging AI and exploiting zero-day vulnerabilities to enhance their strategies. GRIT’s report offers an in-depth look at these evolving threats and profiles major players like Qilin and Akira.

For a complete analysis, the GRIT 2026 report is available for download. Additional resources and participation opportunities can be found through GRIT’s webinars and GuidePoint’s blog posts.

Qsentinel

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.