GuidePoint Security’s GRIT report found ransomware activity surged to record levels in 2025, with 7,515 publicly posted victims—a 58% year-over-year increase—and 124 tracked ransomware groups. Manufacturing was the most impacted industry, while technology, retail, and healthcare also faced significant activity. Qilin emerged as the most prolific group, followed by Akira, as affiliates reorganized following disruptions to established operations. AI and LLMs are increasingly helping attackers adapt and lowering barriers for less-skilled actors, although fully autonomous ransomware remains overstated. The report also highlights continued vulnerability exploitation, data extortion, and a rapidly shifting ransomware ecosystem.

Join for free to read