Ransomware Attacks Surge 53–63% in Two Years, Despite Takedowns of Major Groups A new report from cybersecurity firm Emsisoft reveals a sharp rise in ransomware attacks, with victim counts jumping from approximately 5,400 in 2023 to over 8,000 in 2025—a 53–63% increase. The findings, drawn from data collected by RansomLook.io and Ransomware.live between 2023 and 2025, suggest the actual number of incidents is likely far higher due to underreporting. While law enforcement disruptions and voluntary shutdowns took down prominent ransomware groups—including RansomHub, BianLian, and Hunters International—the overall threat landscape expanded. The number of active ransomware groups nearly doubled, rising from around 70 in 2023 to between 126 and 141 in 2025. Emerging groups like Qilin, Cl0p, Play, and INC Ransom have filled the void left by defunct operations such as LockBit and ALPHV. Emsisoft notes that the disappearance of major players has led to increased competition among affiliates, with new groups vying for dominance. Despite ongoing law enforcement pressure, the report concludes that ransomware remains a growing threat, with no signs of decline in attack frequency or sophistication.