Ransomware Victim Counts Held Flat. The Stolen Data Didn’t.

Cyber Insurance News story on ransomware data exfiltration showing a server rack with every drive bay empty

Ransomware leak sites listed 7,366 victims over the past year. That is 3% fewer than the year before. But… The data taken from those victims tells a different story. Among the 10 groups that leaked the most, combined exfiltration volume rose 275.8% to 896.2 terabytes. Several groups averaged more than a terabyte per victim. Those … Read more

Half Of This Year’s Manufacturing Ransomware Came From Groups That Did Not Exist Two Years Ago

Darkened industrial assembly line with motionless robotic arms and a single red warning light, illustrating manufacturing ransomware victims rising to 1,183 in 2026 with cyber insurance news branding

Jaguar Land Rover shut down its own global IT systems on 2 September 2025. Production stopped at three UK plants building roughly 1,000 vehicles a day, and stayed stopped for more than five weeks. The UK’s Cyber Monitoring Centre rated it a Category 3 systemic event, put the financial impact at £1.9bn ($2.5bn), and counted … Read more

Arctic Wolf: A Third Party Made The Call In Half Of Ransom Payments

Security leaders trust AI with almost nothing. Their carriers approved ransom payments in half the cases where money moved. A third party made the payment decision in half of the ransomware cases where a ransom got paid. Arctic Wolf names the cyber insurer as the example. The finding sits on page 13 of the company’s … Read more

Ransomware Accelerated 60% in Six Months. The Exposure Outlived the Claim

Ransomware had another worst year on record, which now reads less like a warning than a renewal notice. Black Kite counted 7,551 publicly disclosed ransomware victims in the year to March 31, 2026. That runs 24.9% above the prior period. The annual figure hides the shape of the year. Disclosures tracked close to the prior … Read more

Fake Interpol Emails Hit Small Businesses. The Ransomware Is Crude. The Trick Isn’t.

Bitdefender’s Antispam Lab has flagged a ransomware campaign aimed squarely at small businesses. The emails impersonate Interpol. They claim investigators hold evidence of company wrongdoing. The attached “evidence” is malware. The campaign is worth an underwriter’s attention for one reason. The ransomware is basic. The social engineering carrying it is not. How the Scam Works … Read more

×