- 146% rise in ransomware attempts blocked by Zscaler¹—a record volume of ransomware activity
- 70.1% increase in public extortion cases, signaling a shift to extortion-driven attacks
- 238.5 TB of data stolen across 10 major ransomware groups,² underscoring data theft as a top extortion tactic
- 34 new ransomware families identified by ThreatLabz, while groups like RansomHub and Akira remain highly active
- 50.8% of attacks targeted US victims, followed by Canada, the UK, Germany, and India
Ensure ransomware resilience with zero trust + AI
Ransomware groups continue to exploit vulnerabilities in public-facing applications, remote access infrastructure, and legacy technologies such as VPNs and firewalls to gain entry and move laterally.
A zero trust architecture enhanced by AI-powered threat prevention and detection eliminates these risks—hiding apps from the internet, inspecting all traffic, and disrupting threat actors at every stage of an attack.

Using zero trust + AI to stop ransomware at all four stages of an attack, with Jay Chaudhry, CEO of Zscaler

Adopting a coffee shop architecture to prevent ransomware, with Ken Athanasiou, CISO of VF Corporation, a Fortune 500 company
Download the report to learn how Zscaler’s AI-driven zero trust capabilities provide robust protection against existing and emerging ransomware threats.
Ransomware stats from Zscaler
146%
Top 3
238.5 TB
Key ransomware takeaways
Data theft is the endgame
Some attackers are skipping file encryption altogether, focusing on targeted, data-driven extortion.
No industry is spared
Manufacturing, Tech, and Healthcare were top targets, but most sectors saw more attacks year-over-year.
Zero trust is essential
Minimizing the attack surface and preventing lateral movement must be top enterprise security priorities.
Download the full report to learn more
Request a demo
Zscaler is here to help
Simplify ransomware protection with zero trust + AI. Let our experts show you how.