Ransomware Surge in 2025: Record Victims and Evolving Threat Landscape Ransomware attacks reached new heights in 2025, with extortion groups publicly naming 7,458 victims on dark web leak sites a 30% increase from 2024 according to research by Searchlight Cyber. The report, cited by Security Brief United Kingdom, identified 124 active ransomware gangs, including 73 new groups, reflecting a fragmented but resilient criminal ecosystem where attackers frequently rebrand, splinter, or collaborate to evade law enforcement. Qilin emerged as the most prolific group in the second half of 2025, listing 697 victims, followed by Akira, IncRansom, Sinobi, and Play. Qilin’s surge was partly attributed to a coalition with Dragonforce and LockBit, demonstrating the growing trend of gang alliances. The report also noted the rise of "supergroups" like Scattered Lapsus$ Hunters, which consolidate smaller operations for greater impact. Beyond traditional tactics, attackers are increasingly leveraging AI to automate and refine attacks, while supply chain vulnerabilities remain a persistent weak point. Luke Donovan, Searchlight Cyber’s Head of Threat Intelligence, emphasized that arrests alone are insufficient to curb the threat, underscoring the need for organizations to enhance proactive exposure management and visibility to mitigate risks.