Skip to content
Record Ransomware Attacks Surge to 997 in August 2026

Record Ransomware Attacks Surge to 997 in August 2026

First seen 14 Sep 2026, 11:20 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 14, 2026 at 13:48 UTC

In August 2026, ransomware attacks reached a record high of 997, averaging 32 attacks per day, a 23% increase from July's 809 attacks. The healthcare sector experienced a 30% rise, while utility companies saw attacks double from five to ten. Businesses accounted for 861 of the attacks, with significant increases in law firms (up 52%), tech companies (up 42%), and finance companies (up 40%). The most active ransomware groups were Qilin and The Gentlemen, responsible for over 26% of the total attacks. Qilin led with 157 attacks, while The Gentlemen had 107. Confirmed attacks included incidents at Nutex Health Inc., Cedar County Memorial Hospital, and Windrose Health Network. The U.S. was the most targeted country, with 417 attacks. The overall trend indicates a growing threat landscape, particularly for critical sectors like healthcare and utilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-01
Windrose Health Network data breach
Hackers exploited a vulnerability in the network's remote-management tool, leading to a data breach. Storm claimed the attack.
Comparitech
2026-08-14
Cedar County Memorial Hospital attacked
The hospital's IT networks were disrupted, with operations returning to normal on August 28. Wallstreet claimed the attack.
Comparitech
2026-08-24
Nutex Health Inc. reports unauthorized activity
Nutex Health disclosed unauthorized activity in a SEC filing, with The Gentlemen claiming responsibility for the attack.
Comparitech
2026-09-14
Ransomware Roundup published
Comparitech released data showing a record 997 ransomware attacks in August 2026, highlighting the surge in incidents across various sectors.
Comparitech

More articles in this cluster (2)

Following this threat?

Track Clop, Storm and ATF in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed