- 146% rise in ransomware attempts blocked by Zscaler¹—a record volume of ransomware activity
- 70.1% increase in public extortion cases, signaling a shift to extortion-driven attacks
- 238.5 TB of data stolen across 10 major ransomware groups,² underscoring data theft as a top extortion tactic
- 34 new ransomware families identified by ThreatLabz, while groups like RansomHub and Akira remain highly active
- 50.8% of attacks targeted US victims, followed by Canada, the UK, Germany, and India
Ensure ransomware resilience with zero trust + AI
Ransomware groups continue to exploit vulnerabilities in public-facing applications, remote access infrastructure, and legacy technologies such as VPNs and firewalls to gain entry and move laterally.
A zero trust architecture enhanced by AI-powered threat prevention and detection eliminates these risks—hiding apps from the internet, inspecting all traffic, and disrupting threat actors at every stage of an attack.
Download the report to learn how Zscaler’s AI-driven zero trust capabilities provide robust protection against existing and emerging ransomware threats.
Ransomware stats from Zscaler
146%
Top 3
238.5 TB
Key ransomware takeaways
Data theft is the endgame
Some attackers are skipping file encryption altogether, focusing on targeted, data-driven extortion.
No industry is spared
Manufacturing, Tech, and Healthcare were top targets, but most sectors saw more attacks year-over-year.
Zero trust is essential
Minimizing the attack surface and preventing lateral movement must be top enterprise security priorities.
Download the full report to learn more
Request a demo
Zscaler is here to help
Simplify ransomware protection with zero trust + AI. Let our experts show you how.

