July was the worst month for ransomware victim claims in 2026 - or was it?

https://www.zdnet.com/a/img/resize/9fa8216a7ffe6b0e15d47f82c537aae38646a6ab/2026/08/26/9d4dcf97-9bd9-4772-a592-7ae6220fea21/gettyimages-2257849222.jpg?auto=webp&fit=crop&height=675&width=1200

Follow ZDNET: Add us as a preferred source on Google.


ZDNET's key takeaways

  • Ransomware activity hit a year-to-date high of 894 victim organization listings in July.
  • The Gentleman, new ransomware groups, and agentic AI are responsible.
  • However, cybercriminal egos might be inflating the numbers.

New NCC Group research says that July 2026 saw a spike in ransomware activity, with a year-to-date record of 894 victim listings recorded in the month alone. But what's actually behind it?

Also: Why this fully agentic ransomware attack is giving researchers nightmares

According to NCC Group's July threat advisory report, published on Wednesday, global ransomware attacks increased by 22% in July 2026, compared to June 2026. This was also when the first incident of a fully agentic AI ransomware attack chain was also recorded.

Almost a third of attacks were launched against the industrial sector. Other popular targets were consumer services and technology,...

Copyright of this story solely belongs to zdnet.com. To see the full text click HERE

Read more

https://assets.bwbx.io/images/users/iqjWHBFdfxIU/i.63b73uy3Cc/v6/1200x800.jpg

Four Z.ai founders participated in a 2018 to 2021 research project co-funded by CGTRI, which the UK's MI5 said had “very strong ties” to China's main spy agency

Featured Podcasts Training Data: Inside the Robot Data Factory: Mecka's Josh Gao on Sensorizing Humans to Train Robots Sequoia Capital partners host conversations with leading AI builders and researchers to develop a deeper understanding of the evolving technologies and their implications. Subscribe to Training Data. Invest Like the