THE report titled "Black Kite Ransomware Report 2026" reveals a rapid emergence of ransomware groups, with 146 groups active as of June 2026, up from 105 the previous year. It notes that 61 new groups have appeared in 2026 alone, averaging over one new group per week. The report highlights that while many groups emerge, established ones like Qilin, which had 1,358 victims, dominate, with the top five groups accounting for 44% of reported attacks.
The average group lifespan is now just 4.9 months, a decrease from more than a year in 2024. The report suggests organizations enhance cybersecurity measures by prioritizing patch management, identity verification, and employee training to defend against these evolving threats.