Ransomware Attacks Surge in 2025 as AI Fuels New Threats

Last Updated: February 19, 2026By

Surge in Ransomware Incidents and Groups Documented in 2025

In 2025, ransomware attacks surged by 30%, driven by the enhanced accessibility of AI tools. This rise has given birth to numerous new hacking groups, documented in a recent report by Searchlight Cyber titled “Ransomware’s Record Year: Tracking a Volatile Landscape in H2 2025.” The report found 7,458 victims on dark web leak platforms, split evenly across the year’s two halves.

The number of ransomware groups hit a new high at 124, with 73 newly appearing throughout the year. While Searchlight describes these as “record” highs, they’ve only been tracking since 2023. An interesting contrast is that ransom payments fell by 35% in 2024, despite a rise in incidents, showing a possible reluctance among victims to pay. It’s uncertain if 2025 will turn this trend around.

AI Enhances Threat Dynamics

Technological advancements, particularly AI, are empowering cybercriminals, making sophisticated attacks more accessible to novice groups. According to Searchlight Cyber, AI aids in tasks like social engineering and data analysis. Ransomware creators also use AI to enhance their tools, evading security defenses.

The report emphasizes addressing several critical areas to reduce ransomware risks: insider threats from employees or partners, poor patch management, lack of multi-factor authentication, and vulnerabilities in remote systems. Luke Donovan from Searchlight Cyber pointed out that while fewer victims were recorded later in the year, the threat landscape remains complex. Large groups are splintering into small, agile cells, maintaining the pressure on cybersecurity efforts.

Qsentinel: Stay informed and proactive. To protect your organization from ransomware threats, prioritize effective security strategies and stay updated with the latest threat intelligence. Explore Qsentinel’s cybersecurity resources for more insights.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.

Get daily news in your inbox

The lastest on Hacks, ransomware attacks, post quantum security and more