October Ransomware Roundup: Organizations saw over 1K attacks for the second month this year

his morning, Comparitech researchers published a study looking at ransomware attacks in October 2026, finding that the number of attacks surpassed the 1K mark for the second time this year, with an average of 33 attacks per day. The research takes a look at ransomware attacks by sector, which ransomware gangs were most prolific, which countries were most targeted, and more.

Commenting on the findings is Rebecca Moody, Head of Data Research at Comparitech:

“Despite a slight reprieve in ransomware attacks in September, levels surpassed 1,000 for the second time this year in October. The sheer scale of attacks is hugely concerning, particularly as key sectors like education and healthcare are seeing record-breaking levels.

As AI continues to aid hackers’ speed and ability to find and exploit vulnerabilities, now’s the time to take heed and make sure those essential basics are being covered. Last month’s attack on GMO Internet, Inc. should serve as a stark warning to every organization. The tech company is currently dealing with the fallout of a massive attack that has impacted multiple companies and as many as 26,739 servers. It not only highlights the risk of inadequate cybersecurity practices but also hackers’ growing ambition to target individual companies/customers affected by an attack on a central organization.

GMO has just admitted that it hadn’t adequately dealt with a vulnerability that was flagged two years ago and that hackers were able to access customers’ virtual private servers (VPSs) and GMO’s “drive-sharing” feature to download files stored on customers’ computers. These customers are now being blackmailed with hackers threatening to send browsing histories and confidential data to individual victims’ family members and customer contacts.

At a time when it’s a case of when not if you’re going to have to deal with some kind of cybersecurity incident, be it within your own systems or those of a third-party service, it’s vital basics are being covered. That data backup, patched vulnerability, employee training, or system update could be the difference between thwarting an attack before it’s even started or finding yourself up the proverbial creek without a paddle.”

The full research can be read here: https://www.comparitech.com/news/ransomware-roundup-october-2026/

Leave a Reply