Cyberstats

Security Intelligence

VendorsNCC Group

NCC Group

Cybersecurity reports and statistics published by NCC Group

8 categories2 reports

Research Reports

Reports and publications from NCC Group

NCC Group Monthly Threat Pulse – Review of June 2025

NCC Group Monthly Threat Pulse – Review of May 2025

Recent Statistics & Reports

The Handala ransomware group, a pro-Palestine group, targeted 17 Israeli organisations between 14th and 30th June 2025. These attacks coincided with the 12-day Iran-Israel war.

Ransomware Handala Threat actors

Qilin ranked as the third most active threat group in May 2025 with 42 attacks.

Ransomware Qilin Threat actors

Industrials remained the most targeted sector, accounting for 27% of all attacks in June 2025, which was 102 cases.

Ransomware Industrials

North America was responsible for 52% of ransomware attacks across Q2 2025.

Ransomware North America

Ransomware attacks in the Consumer Discretionary sector (including retail) fell significantly from 102 in May 2025 to 76 in June 2025.

Ransomware Consumer discretionary

Qilin was the most active threat group in June 2025, responsible for 16% of all attacks, which amounted to 60 cases.

Ransomware Qilin Threat actors

Play dropped to third place of most active threat groups in June 2025 with 29 attacks.

Ransomware Play Threat actors

Asia had a 12% share of ransomware attacks (43 cases) in June 2025.

Ransomware Asia

North America remained the hardest-hit region, accounting for 58% of all global ransomware attacks (215 cases) in June 2025.

Ransomware North America

Industrials represented nearly a third (30%) of all ransomware attacks in Q2.

Ransomware Industrials

The Information Technology sector came fourth in June with 33 ransomware attacks.

Ransomware Information Technology

Healthcare ranked third in June 2025 with 42 ransomware attacks, nearly doubling from 22 in May.

Ransomware Healthcare

Akira was the second most active threat group in June 2025, with 31 attacks, rising from fourth place in May.

Ransomware Akira Threat actors

Qilin saw a significant rise in Q2 2025 with 151 attacks, up from 95 attacks in Q1.

Ransomware Qilin Threat actors

SafePay dropped to fourth place of most active threat groups in June 2025 with 27 attacks.

Ransomware SafePay Threat actors

Europe experienced an 8% drop in June 2025, accounting for 21% of ransomware attacks (79 cases). This was fewer than half the number recorded in North America.

Ransomware Europe

South America had a 4% share of ransomware attacks (15 cases) in June 2025.

Ransomware South America

Overall, 79% of all global ransomware cases in June 2025 took place in North America and Europe combined

Ransomware North America Europe

North America remains the hardest-hit region, accounting for 50% of all global attacks, which is 193 incidents in May.

Europe experienced 29% of all global attacks, totalling 112 incidents, in May.

Showing first 20 results

Top Categories

7

3

3

2

2

1

Consumer discretionary

Related Vendors

Cisco Talos Blog

Rubrik Zero Labs