The State of Ransomware Q2 2026
Check Point, Thursday, August 13th, 2026
Check Point's State of Ransomware Q2 2026 finds the ecosystem spreading out rather than concentrating further.
Check Point Research published its State of Ransomware report for Q2 2026. For the past year the ransomware conversation has centred on concentration, with a handful of dominant ransomware-as-a-service operations controlling most of the damage and a shrinking pool of active groups fighting over the same territory.
The Q2 data shows that picture starting to shift. The leaders are still winning, but the distribution of activity is changing underneath them.
The report details victim counts, group activity and the operational changes behind the trend.