KELA REPORT

Escalating Ransomware Threats to National Security

How ransomware groups target critical sectors and government, what KELA observed across the cybercrime underground, and how nations can respond.

Share:

KELA report cover: Escalating Ransomware Threats to National Security

Ransomware has evolved from an enterprise risk into a strategic national security threat. Once driven primarily by profit, it is now leveraged by organized cybercriminals and state-linked actors to disrupt critical infrastructure, destabilize economies, and erode public trust.

In 2025, half of all ransomware attacks worldwide targeted essential sectors such as manufacturing, healthcare, energy, transportation, and finance — revealing a clear shift from opportunistic crime to systemic disruption.

In KELA’s new report, you’ll learn:

  • The ransomware trends shaping global risk in 2025 and 2026
  • The top actors driving large-scale attacks
  • Sector and geography-specific breakdowns of targets
  • Recommendations for building stronger cyber resilience

In KELA’s new report, you’ll learn:

Related Resources

KELA on-demand webinar banner: The TeamPCP arrests, from the inside, with Ben Kapon and Jimmy

The TeamPCP arrests, from the inside

KELA report cover: TeamPCP Threat Actor Profile

TeamPCP Threat Actor Profile

KELA press release banner: "Breaking: KELA research leads to alleged TeamPCP members arrested," with police escorting a person in custody

KELA research leads to alleged TeamPCP Members Arrested