Retailers see sharp uptick in ransomware attacks
Global ransomware events reached a new high in the first half of 2026 with retailers experiencing a significant increase.
During the first half of 2026, an average of 23 ransomware attacks per day occurred around the world. In the first six months of 2026, the Comparitech daily ransomware tracker logged 4,217 ransomware attacks. This is an 11% increase on the second half of 2025 (3,809).
| ate | Total Attacks | # of Days | Attacks per Day |
|---|---|---|---|
| H1 2024 | 2,456 | 182 | 13 |
| H2 2024 | 3,179 | 184 | 17 |
| H1 2025 | 3,706 | 181 | 20 |
| H2 2025 | 3,809 | 184 | 21 |
| H1 2026 | 4,217 | 181 | 23 |
Examining these 4,217 attacks, Comparitech found that 484 were confirmed by the targeted organizations. The rest were claimed by ransomware groups on their data leak sites but have not been publicly acknowledged by the targets. According to Comparitech data, this total included 326 attacks recorded against retailers (28 confirmed), up 28% from 254 in the second half of 2025.
Of the 484 confirmed ransomware attacks tracked by Comparitech:
- 319 were on businesses.
- 83 were on government entities.
- 49 were on healthcare companies.
- .33 were on educational institutions
Of the 3,733 unconfirmed ransomware attacks tracked by Comparitech:
- 3,356 were on businesses.
- 102 were on government entities.
- 198 were on healthcare companies.
- 71 were on educational institutions.
Other findings
Comparitech also compiled a number of other interesting metrics related to global ransomware activity in the first half of 2026:
- Despite the global increase, ransomware attacks in the U.S. dropped 8% compared to the second half of 2025. Comparitech says this is likely due to the large number of claims made by a major non-U.S.-based group known as “The Gentlemen” which mostly operates outside the U.S.
- 5,019,204 records were compromised in the confirmed attacks
- The median ransom demand was 150,000 (average: $1.36 million)
- The U.S. was still the most targeted country with 1,832 attacks in total, followed by Canada (200), Germany (164), the United Kingdom (157), Italy (131), France (117), and Spain (100)
- China saw one of the biggest upticks in attacks from the second half of 2025 (up 540% from 5 to 30).
