Qilin Ransomware Attack Impacts 104 Organizations in August

In August, Qilin Ransomware claimed 104 victims, reasserting its position at the top of the global ransomware arena and nearly doubling the second-place total of Akira, which reported 56 attacks. The attack marked the fourth time in five months that Qilin topped the leaderboard, underscoring the group’s ongoing expansion and its aggressive affiliate recruitment strategy.

Since the decline of RansomHub in April, Qilin has addressed 398 claimed victims, representing 18.4 percent of all ransomware incidents logged over the past five months, placing it more than 70 percent ahead of Akira, which stands at 10.7 percent. The report notes that Sinobi rose to third place in August, with The Gentlemen and other newcomers beginning to reshape the threat landscape.

Construction, Professional Services, Manufacturing and Healthcare remain among the most targeted sectors, with the U.S. continuing to bear the lion’s share of attacks and the U.K. highlighted as experiencing substantial activity. For defenders, the guidance remains to strengthen cyber resilience through measures such as network segmentation, zero trust, immutable backups, and proactive threat monitoring.