2025 Ransomware Surge: BlackFog Report Reveals 49% Rise Globally
Ransomware Attacks Surge in 2025
Cybercriminals found new momentum in 2025, with ransomware incidents rocketing by 49%, according to BlackFog’s latest report. This dramatic rise highlights the increasing threat of cyberattacks, now driven largely by sophisticated AI technology. These tactics focus on being fast and sneaky, rather than noisy and chaotic, leading to an unprecedented surge in activity.
Public and Undisclosed Incidents
In 2025, publicly disclosed ransomware attacks nearly quadrupled, totaling 1,174 cases. Yet, it’s the hidden threats that concern experts, with a 37% increase in undisclosed incidents emphasizing the invisibility of many attacks. This growing shadow of unreported cases is a significant challenge for cybersecurity efforts.
Ransomware Groups and AI Threats
The landscape saw 130 active ransomware groups, with 52 new players. The Qilin group led the charge, followed closely by Akira and Play. A troubling trend was the use of AI, with cybercriminals leveraging advanced models like Anthropic’s Claude for tasks such as data theft, signaling a new era in cybersecurity threats.
Sector and Global Impact
The retail and healthcare sectors were heavily targeted, with the services industry experiencing a 118% spike in attacks. Globally, ransomware reached 135 countries, with the U.S. suffering the brunt of these assaults, especially in undisclosed cases. Meanwhile, a rise in unreported incidents suggests many attacks are flying under the radar.
Dr. Darren Williams from BlackFog stressed the pervasive threat ransomware poses, underscoring the need for enhanced protection strategies to thwart these evolving dangers. For more in-depth insights, explore the full report on BlackFog’s website.
Qsentinel: Stay informed and protect your digital landscape with insights and tips delivered straight to your inbox.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more

