Ransomware activity isn’t slowing down—it’s stabilizing at elevated levels.
Following a surge in late 2025, ransomware volume in Q1 2026 held steady both quarter-over-quarter and year-over-year, signaling that today’s high level of activity is becoming the new baseline for organizations.
Join GuidePoint Security’s Research and Intelligence Team (GRIT) for a breakdown of the latest ransomware trends shaping the threat landscape. In this quarterly session, GRIT analysts will walk through key findings from Q1, highlight emerging attacker behavior and explain what these shifts mean for the months ahead.
In this presentation, you’ll learn:
- Why ransomware activity remains consistently elevated entering 2026
- Which industries are seeing increased pressure—including a sharp rise in construction sector attacks
- Why attackers are shifting toward data theft and extortion-only operations
- How new groups like The Gentlemen are quickly gaining traction
- What declining activity from established groups may signal about the evolving ecosystem
Save your spot to hear directly from the GRIT team.
GRIT Presenters:
- Jason Baker – Managing Security Consultant,
Threat Intelligence (GRIT)
- Grayson North – Principal Threat
Intelligence Consultant
- Justin Timothy – Principal Threat
Intelligence Consultant
- Nick Hyatt – Principal Threat Intelligence Consultant
