Data exfiltration among top ransomware groups reached 896 terabytes over the past year. Behind that surge is a ransomware playbook that’s harder to defend against—from manager-level targeting and trusted tool abuse to GenAI-assisted malware development and scripting languages to adapt tooling and evade detection.
Understanding ransomware risk across the enterprise
Explore the latest ransomware trends and insights from Zscaler ThreatLabz, based on expert analysis of public leak sites, ransomware samples and attack data, and blockchain intelligence.
In this report, you'll learn the latest about:
- Top ransomware targets by industry, country, and employee profile
- The top ransomware groups to watch in 2027
- Data exfiltration volumes and the groups stealing the most data
- What ransom payments reveal about extortion patterns
- Ransomware threat actor TTPs challenging enterprise defenses
- Security strategies that matter most for reducing ransomware risk
Key ransomware stats from ThreatLabz
276%
increase in data exfiltration volume
$420K
average known ransom payment
62%