Two groups account for a third of UK ransomware attacks
Two ransomware groups now account for a third of UK attacks. AI is making it easier to scale, harder to predict.
Why it matters
Ransomware attacks are shifting geographically (Europe rising, US declining) and concentrating among fewer, more capable groups. The operational risk for enterprise defenders is that AI-assisted reconnaissance and payload customization are lowering the barrier to scale — meaning more targets face threats from better-resourced, higher-velocity actors.
The key facts
9 to knowTwo groups account for one-third of UK ransomware attacks
Europe is becoming a primary target as US ransomware attacks decline
AI is making ransomware easier to scale and harder to predict
Source: Cohesity data
Published October 12, 2026
Two ransomware groups account for one-third of UK attacks
Europe has become primary target as US ransomware attacks decline
Data source: Cohesity ransomware report
Threat consolidation around fewer, more capable groups
Go to the source
ITProitpro.com
Publisher excerpt: Data from Cohesity has revealed that Europe has become a primary target as the number of US ransomware attacks declines