CTIPilot

Check Point Research: The State of Ransomware Q2 2026

report · report:checkpoint-state-of-ransomware-q2-2026

Check Point Research's quarterly cross-sector ransomware landscape report, published 2026-08-13 from data-leak-site victim data. Counts 2,139 victims in Q2 2026, essentially flat quarter over quarter and up 33% year over year, with the top ten groups' share falling from 71% to 57.6% while the number of active groups climbed from 71 to 93, a new high for the tracked period. Records Qilin as the most prolific operator for a fourth straight quarter at 279 victims despite a 17% fall, The Gentlemen surging 62% to 269, the US victim share falling from 50% to 42%, ransom payment rates at a multi-year low near 23%, and a narrowing exploitation window with AI increasingly cited as the accelerant.

Coverage timeline
0
first 2026-08-16 → last –
no data
Peak priority
·
no matching entries
Sources cited
0
0 hosts
Sections touched
0
·
Co-occurring entities
0
no co-occurrence
ATT&CK techniques
0
no mapped behavior yet

Story timeline

No published entries reference this entity yet.

explore in graph

Entries about Check Point Research: The State of Ransomware Q2 2026

No published entry references this entity yet · entries match by registry key, by the entity's name or a public alias appearing in the entry title or body, or (for CVE entities) by exact CVE id.