Play Ransomware conducted an average of 30 attacks per month, peaking in October 2024 with at least 52 attacks10. Approximately 89.9 percent of Play Ransomware's victims were based in North America10. 24.7% of Play Ransomware's victims were in the manufacturing industry and 17.5% were in the construction industry.

North America remained the most targeted region in December, accounting for 52% of ransomware attacks. The number of attacks in this region, however, decreased from 326 in November to 300 in December.

Akira averaged 19 attacks per month between January 2024 and November 2024. In December, the collective added at least 93 separate victims to their leak site, bringing their 2024 monthly average up to approximately 25. Throughout 2024, approximately 71 percent of Akira’s victims were based in North America, rising to approximately 81 percent in Q4 2024.

18% of those who always practiced privacy by design reported currently using AI for privacy-related tasks.

North America was consistently the most-targeted region during 2024, accounting for an average of approximately 58 percent of global R&DE attacks.

15% of respondents in Europe and North America lack confidence in their country’s ability to respond to major cyber incidents targeting critical infrastructure.