GoKawiilRansomware victim claims hit 894 in July, a 2026 monthly high, NCC Group finds
NCC Group's July threat advisory reports a 22% month-over-month rise in ransomware activity, with 894 victim organization listings recorded across industrial, consumer services, technology, critical infrastructure, finance and healthcare sectors. The Gentlemen and Quilin topped the list of attributed groups, while the US accounted for 41% of incidents; notably, the month also saw the first fully agentic AI-driven ransomware attack chain and a breach at Ernst & Young claimed by ShinyHunters.