Enterprise Threat Intel

Ransomware Resurgence: Qilin and The Gentlemen Dominate

Ransomware Resurgence: Qilin and The Gentlemen Dominate

Key Questions

What does the NordStellar Q2 2026 report reveal about ransomware attack volumes?

The report confirms 2,581 ransomware attacks in Q2 2026. It also notes that attacks rose 20% year-over-year overall.

Which groups led ransomware attacks in the NordStellar report?

Qilin led with 299 attacks and The Gentlemen followed with 284 attacks. These two groups are currently battling for dominance.

How has enterprise ransomware targeting changed recently?

Enterprise targeting increased 74% year-over-year. The rise is attributed to ecosystem fragmentation and supply-chain leverage rather than AI.

What impact has ransomware had on the healthcare sector?

Healthcare saw a 35% increase in attacks. This sector has been hit particularly hard amid the overall resurgence.

What does Black Kite data show about ransomware victim trends?

Black Kite reported a 60% surge in victims during H2 2025. Many victims leave the same vulnerabilities unpatched, leading to repeat attacks.

NordStellar Q2 2026 report confirms 2,581 attacks, with Qilin (299) and The Gentlemen (284) leading. Enterprise targeting up 74% YoY. Healthcare sector hit hard with 35% increase. Black Kite data shows 60% victim surge in H2 2025, driven by ecosystem fragmentation and supply-chain leverage, not AI. Ransomware victims often leave same vulnerabilities open, leading to repeat attacks.

Sources (4)
Updated Jul 22, 2026