MORE than 1,000 organisations worldwide were hit by ransomware in August 2026, according to NCC Group’s Cyber Threat Intelligence Report for August 2026, published on 23 September. The report recorded 1,073 victims, a 12% increase from 973 in July and the highest monthly total recorded in 2026. North America accounted for 44% of known incidents, followed by Europe at 26% and Asia at 13%. South America, Africa and Oceania each represented smaller shares of reported victims.
The industrial sector was the most frequently targeted, accounting for 31% of incidents. Consumer goods and services represented 18%, healthcare 12%, information technology 11% and financial services 6%. Incidents referenced by NCC Group included an attack targeting Boston Dynamics and a data breach affecting Manchester Airport Group. The latter illustrates a shift by some criminal groups away from encrypting systems towards stealing data and demanding payment.
Among incidents linked to known actors, 164 were attributed to Qilin and 116 to The Gentlemen. Clop was linked to 89, while Dire Wolf and INC Ransom were each linked to 43. NCC Group described August as the second consecutive month with the year’s highest ransomware levels, citing rapid advances in AI and geopolitical volatility as contributing factors. It recommended that organisations maintain response plans and conduct tabletop exercises to identify and address weaknesses before an attack.