Skip to content
resource center
The library behind anti data exfiltration.
Reports, data sheets, guides, and definitions. The research and reference that back every decision we make.
The State Of Ransomware Report
The industry’s most-cited tracker of publicly disclosed and undisclosed ransomware attacks worldwide. The data security teams, journalists, and researchers reference regularly.
The State Of Ransomware
UPDATED QUARTERLY 
Q2 2026 attacks tracked
Undisclosed attacks
2027
Disclosed attacks
306
Only 1 in 8 attacks is ever made public.
Attacks ending in exfiltration
97%
Most active group
Qilin
AWARD-WINNING BLOG SERIES
The State Of Ransomware, published every month.
Between the quarterly reports, our award-winning monthly series tracks ransomware as it happens: a global count of both publicly disclosed attacks and the undisclosed incidents surfacing on dark web leak sites, with the sectors, countries and groups behind them.
No form, no download. Read it on the blog the day it publishes.
browse the library
Find it by format
from the blog
Latest from the blog
- Categories: Ransomware, Research
Since 2020 BlackFog has measured publicly disclosed attacks globally. The 2022 ransomware attack report reflects on the key findings from 2022.
- Categories: Data Exfiltration
Ransomware has forced business leaders to reevaluate the data they collect and process, it has also changed the dynamics of confidential data and intellectual property breaches in general. All data has value, but some types are simply worth more than others.
- Categories: Ransomware
Tracking ransomware attacks in the news over the last 36 months has given us some important insight and salient lessons about tackling this escalating problem. As we move on from what has been the busiest year so far, we take a look at the top 10 lessons learned from 2022.
featured posts
BlackFog Q2 2026 Ransomware Report: Undisclosed Ransomware Attacks Surge 40% Year on Year
stay ahead of the curve