VendorsNCC Group
NCC Group
Cybersecurity reports and statistics published by NCC Group
8 categories5 reports
Research Reports
Reports and publications from NCC Group
Recent Statistics & Reports
North America was responsible for 52% of ransomware attacks across Q2 2025.
7/23/2025•
RansomwareNorth America
The Handala ransomware group, a pro-Palestine group, targeted 17 Israeli organisations between 14th and 30th June 2025. These attacks coincided with the 12-day Iran-Israel war.
7/23/2025•
RansomwareHandalaThreat actors
Qilin ranked as the third most active threat group in May 2025 with 42 attacks.
7/23/2025•
RansomwareQilinThreat actors
Industrials remained the most targeted sector, accounting for 27% of all attacks in June 2025, which was 102 cases.
7/23/2025•
RansomwareIndustrials
Ransomware attacks in the Consumer Discretionary sector (including retail) fell significantly from 102 in May 2025 to 76 in June 2025.
7/23/2025•
RansomwareConsumer discretionary
Overall, 79% of all global ransomware cases in June 2025 took place in North America and Europe combined
7/23/2025•
RansomwareNorth AmericaEurope
Europe experienced an 8% drop in June 2025, accounting for 21% of ransomware attacks (79 cases). This was fewer than half the number recorded in North America.
7/23/2025•
RansomwareEurope
SafePay dropped to fourth place of most active threat groups in June 2025 with 27 attacks.
7/23/2025•
RansomwareSafePayThreat actors
Play dropped to third place of most active threat groups in June 2025 with 29 attacks.
7/23/2025•
RansomwarePlayThreat actors
Qilin was the most active threat group in June 2025, responsible for 16% of all attacks, which amounted to 60 cases.
7/23/2025•
RansomwareQilinThreat actors
Qilin saw a significant rise in Q2 2025 with 151 attacks, up from 95 attacks in Q1.
7/23/2025•
RansomwareQilinThreat actors
Akira was the second most active threat group in June 2025, with 31 attacks, rising from fourth place in May.
7/23/2025•
RansomwareAkiraThreat actors
Healthcare ranked third in June 2025 with 42 ransomware attacks, nearly doubling from 22 in May.
7/23/2025•
RansomwareHealthcare
The Information Technology sector came fourth in June with 33 ransomware attacks.
7/23/2025•
RansomwareInformation Technology
North America remained the hardest-hit region, accounting for 58% of all global ransomware attacks (215 cases) in June 2025.
7/23/2025•
RansomwareNorth America
Industrials represented nearly a third (30%) of all ransomware attacks in Q2.
7/23/2025•
RansomwareIndustrials
South America had a 4% share of ransomware attacks (15 cases) in June 2025.
7/23/2025•
RansomwareSouth America
Asia had a 12% share of ransomware attacks (43 cases) in June 2025.
7/23/2025•
RansomwareAsia
Asia experiencec 13% of all global attacks, with 49 incidents in May.
6/25/2025•
Ransomware
There were a total of 393 attacks globally in May. This marks the third consecutive month in which ransomware attacks have dropped.
6/25/2025•
Ransomware
Showing first 20 results