Ransomware growth undeterred by crackdowns, report finds

Over 8,000 organizations around the world were claimed to have been impacted by ransomware intrusions last year, a figure more than 50% higher than in 2023, despite intensified law enforcement takedowns, The Register reports.

Active ransomware operations have risen from a few dozen to hundreds between 2023 and 2025, with the proliferation of smaller threat groups embracing new identities hindering the effectiveness of international disruption efforts in reducing the prevalence of ransomware incidents, according to Emsisoft's 2025 State of Ransomware in the US report.

While Qilin, Clop, Play, and Akira continued to claim the most victims, researchers cautioned that others may not be as vocal in their intrusions. Moreover, social engineering, phishing, and exfiltrated logins have been increasingly tapped by ransomware gangs to facilitate initial network compromise.

"As long as affiliates remain plentiful and social engineering remains effective, victim counts are likely to continue rising," said Emsisoft threat intelligence analyst Luke Connolly.