Comparitech: April 2025 Ransomware Roundup Is Out

Comparitech researchers have released a study looking at all the ransomware attacks in April 2025. April may have been quieter, but it did see some of the largest attacks so far this year. These include the ongoing attack on UK retail chain, Marks & Spencer and the crippling attack on US kidney dialysis company, DaVita Inc. 

Key findings for April 2025:

  • 479 attacks in total — 39 confirmed attacks
  • Of the 39 confirmed attacks:
    • 21 were on businesses
    • 9 were on government entities
    • 6 were on healthcare companies
    • 3 were on educational institutions
  • Of the 440 unconfirmed attacks*:
    • 396 were on businesses
    • 16 were on government entities
    • 16 were on healthcare companies
    • 11 were on educational institutions
  • The most prolific ransomware gangs were Qilin (67), Akira (62), Play (50), Lynx (32), and NightSpire (22). Akira had the most confirmed (3) followed by Qilin, NightSpire, Silent, and Sarcoma with two each
  • RansomHub went “dark” in April, listing no new victims on its data leak site. Some suggest affiliates have moved to the likes of Qilin–and with a notable increase in claims from Qilin (up to 67 in April from 45 in March) this could be the case

The report is live at this link: https://www.comparitech.com/news/ransomware-roundup-april-2025/

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading