Record-High Ransomware Activity Reported Globally and in the Philippines

• •Global ransomware victims reached 2,760 in Q3 2026, a 75% increase from last year.
• •The Philippines saw 31 ransomware claims in 2026, exceeding totals from the previous two years combined.
• •Qilin and the Gentlemen were the most active ransomware groups, with opportunistic targeting observed.

GuidePoint Security's Q3 2026 report indicates a record 2,760 ransomware victims globally, marking a 75% increase year-over-year. The number of active ransomware groups rose to 112, with the Gentlemen and Qilin being the most active. Despite a decline in payment rates, the average ransom payment increased by 34%. In the Philippines, ransomware claims surged, with 31 public claims recorded from January to August 2026, surpassing totals from 2024 and 2025 combined. The report noted that opportunistic targeting remains prevalent, with no single group dominating the landscape. Qilin was responsible for nine claims, contributing significantly to the rise. The overall threat landscape in the Philippines included 264 cyber incidents, with government agencies being the most affected. The use of AI in cybercrime was noted, although it primarily related to fraud rather than technical intrusions.