News Summary

• Ransomware attacks surged by 19% in July compared to June.
• Finance, tech and healthcare industries were heavily impacted.
• The Gentlemen and Qilin groups together accounted for 33% of all attacks in July.
• An analysis by ReliaQuest found that The Gentleman group emerged as the most prolific threat actor behind cyber extortion campaigns between March and May 2026, usurping the previously dominant Qil in the battle for supremacy between these two strains.
• The next most active group was DragonForce, making up 41 attacks, followed by INC (36), CRPx0 (33) and SafePay (30)