Sector Analysis
UK Ransomware in Q1 2026: 47 Confirmed Victims, 22 Groups, One Every 42 Hours
Ransomware.live recorded 47 confirmed UK victims in the first quarter of 2026, claimed by 22 distinct groups. A national sports governing body, a university medical research unit, a payments processor, three primary schools, a craft brewery, a concert hall, and dozens of manufacturers and engineering firms. Here is the complete picture.
Who Ransomware Groups Hit in the UK in February 2026 — A Sector and Size Analysis
Ransomware.live recorded 12 confirmed UK victims in February 2026. Analysing who was hit, how large they were, and what sectors were targeted reveals a pattern that challenges the assumption that small businesses fly under the radar.
Who Ransomware Groups Hit in the UK in January 2026 — A Sector and Size Analysis
Ransomware.live recorded 20 confirmed UK victims in January 2026. The construction and engineering sector accounts for more than a third of all victims. Two primary schools were hit in the same month. And Clop struck three UK organisations in a single day.
Who Ransomware Groups Hit in the UK in December 2025 — A Sector and Size Analysis
Ransomware.live recorded 17 confirmed UK victims in December 2025. A trade union, a tea brand emerging from administration, a law firm, a telecom company that sells cyber security, and five organisations hit in the final five days of the year. Here is what the data shows.
The Global Ransomware Landscape in 2025: 7,419 Victims, 126 Groups, and the Year Everything Changed
A data-driven analysis of every dimension of the 2025 global ransomware landscape: 7,419 confirmed victim claims, the collapse of RansomHub and rise of Qilin, the Oracle EBS zero-day, the UK retail siege, confirmed patient harm from a ransomware attack, the decline in payment rates, and what the data means going into 2026.
Who Ransomware Groups Hit in the UK in November 2025 — A Record Month in Context
November 2025 was the second-highest month on record for global ransomware, and the UK was the third most targeted country with 17 confirmed claims. A shopping centre, a motorsport team, a precision manufacturer, and an industrial supplier were among those named. Here is what the data shows.