Halcyon Ransomware 
Research Center

Uniting experts, driving smart policies, and delivering actionable intelligence to detect, disrupt, and defeat ransomware.
Join the Mission
Join the Mission
Jan 12
/
Thailand
/
Tengu
Jan 12
/
USA
/
Sinobi
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Inc Ransom
Jan 12
/
USA
/
Inc Ransom
Jan 12
/
USA
/
Inc Ransom
Jan 12
/
USA
/
Devman
Jan 12
/
USA
/
Devman
Jan 12
/
USA
/
Devman
Jan 12
/
Brazil
/
Devman
Jan 12
/
Ecuador
/
Devman
Jan 12
/
USA
/
Akira
Jan 13
/
Hong Kong
/
Inc Ransom
Jan 12
/
USA
/
Akira
Jan 12
/
Italy
/
Akira
Jan 13
/
Italy
/
Inc Ransom
Jan 12
/
Germany
/
Akira
Jan 13
/
USA
/
Inc Ransom
Jan 13
/
United Kingdom
/
Sinobi
Jan 13
/
United Arab Emirates
/
Inc Ransom
Jan 13
/
USA
/
Everest
Jan 13
/
Malaysia
/
Dire Wolf
Jan 13
/
Malaysia
/
Dire Wolf
Jan 13
/
United Kingdom
/
Beast
Jan 13
/
Japan
/
Dire Wolf
Jan 13
/
United Kingdom
/
Beast
Jan 13
/
Canada
/
Beast
Jan 13
/
USA
/
Akira
Jan 14
/
Mauritius
/
The Gentlemen
Jan 13
/
USA
/
Akira
Jan 14
/
USA
/
Tengu
Jan 14
/
Saudi Arabia
/
Tengu
Jan 14
/
India
/
Sinobi
Jan 14
/
USA
/
Qilin
Jan 14
/
USA
/
Qilin
Jan 14
/
USA
/
Qilin
Jan 12
/
Thailand
/
Tengu
Jan 12
/
USA
/
Sinobi
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Qilin
Jan 12
/
USA
/
Inc Ransom
Jan 12
/
USA
/
Inc Ransom
Jan 12
/
USA
/
Inc Ransom
Jan 12
/
USA
/
Devman
Jan 12
/
USA
/
Devman
Jan 12
/
USA
/
Devman
Jan 12
/
Brazil
/
Devman
Jan 12
/
Ecuador
/
Devman
Jan 12
/
USA
/
Akira
Jan 13
/
Hong Kong
/
Inc Ransom
Jan 12
/
USA
/
Akira
Jan 12
/
Italy
/
Akira
Jan 13
/
Italy
/
Inc Ransom

Ransomware by the Numbers

2025
5,414
Claimed Victims Globally
2024
$4,880,000
Average Breach Cost
Q3
2025

Manufacturing

‍Healthcare ‍

Education

‍ Business Services

‍Construction

Most Targeted
Q3
2025
Akira
Lynx
Medusa
INC Ransom
Qilin
Most Active Groups
FEATURED RESOURCES

Get the Latest Research and Alerts

Get the latest Halcyon digital goodies, from webinars to white papers, and everything in between.
February 12, 2026
Report

How AI is (and is Not) Changing Ransomware

Read Report
December 8, 2025
Report

Ransomware: Escalating Threats to Retail During Peak Holiday Season

Read Report
February 9, 2026
Alert

Emerging Ransomware Group: 0Apt

Read Alert

Explore our Ransomware Profiles and Resources

ATTACKS MAP TRACKER
A map of the world with a red triangle and the words "Ransomware Attack!" written above it.

Halcyon Attacks Lookout

Explore Latest Attacks
UnmaskING the Threats

Inside the Threat Actor Index

Uncover key ransomware groups, their tactics, and targets. Explore the Threat Actor Index to strengthen your defenses and stay prepared for today’s most dangerous adversaries.
Explore Threat Actors