Trends and threats from the past quarter, with insights to protect your organization.
Get the latest report from the GuidePoint Research & Intelligence Team (GRIT), which digs into findings from the second quarter of 2026. Dive into insights like these:
- Ransomware victim volume continues to increase. Q2 2026 ransomware victims are up 7% from Q1 2026 and 43% from Q2 2025.
- Active threat groups reached a record high with GRIT observing 91 active ransomware groups in Q2 2026, with operations spanning 108 countries.
- The five most prolific groups collectively claimed more than 40% of all recorded attacks. Qilin remained the most active group, while The Gentlemen continued its rapid ascent into the second spot and DragonForce became the third most active group for the first time.
- AI is emerging as a threat actor productivity tool. Rather than enabling a wave of catastrophic AI-native attacks, GRIT observed threat actors using large language models to analyze exfiltrated data, personalize ransom negotiations and manufacture psychological pressure.
- Manufacturing remains the most impacted industry, accounting for nearly 15% of reported ransomware victims in Q2 2026.
Download the report now.
