Ransomware Didn't Slow Down in Q2 2026. It Just Spread Out.
Check Point, Thursday, August 13th, 2026
Check Point finds Q2 2026 ransomware volumes flat but activity dispersing across more capable small groups.
Check Point reports that ransomware kept its grip through the second quarter of 2026 with the headline number barely moving, but that what changed underneath is more significant.
Data leak sites recorded 2,139 ransomware victims in Q2 2026, essentially flat versus Q1 and up 33% year over year.
New research gave analysts a rare look inside a top-tier operation as it was being built, revealing how little it now takes for a small, skilled group to reach the top of the field. The post translates those findings into defensive implications. It accompanies Check Point Research's fuller State of Ransomware Q2 2026 report.