ZeroFox’s Q1 2026 Ransomware Wrap-Up reveals key insights, including:
- Manufacturing led all sectors (~20% of attacks), continuing its position as the most targeted industry since 2021 and reflecting continued focus on high-disruption targets.
- Sustained targeting is driven by low tolerance for downtime and the use of vulnerable OT infrastructure behind automation.
- Qilin and Akira accounted for 26 percent of global incidents, while The Gentlemen emerged as a fast-scaling group, with manufacturing representing ~28 percent of its activity.
