NCC Group: July ransomware attacks hit 2026 high, up 22% to 894 cases
CIBR•Threat groups mentioned in the report
The Gentlemen was attributed with 15% of attacks; a new group, CRPxO, claimed 36 victims, though evidence was described as inconsistent.
July ransomware activity rose to a 2026 high
NCC Group reported July ransomware cases rose 22% from June to 894, the highest monthly total in 2026.
The count was 19% below the monthly record of 1,099 attacks in February 2025.
Industrials and North America remained the biggest targets
Industrials led targets, accounting for 28% of attacks, underscoring elevated operational disruption risk for manufacturers and infrastructure operators.
North America represented 41% of incidents and Europe 29%, keeping the two regions at 70% of global ransomware activity.
