KELA REPORT

Escalating Ransomware Threats to National Security

How ransomware groups target critical sectors and government, what KELA observed across the cybercrime underground, and how nations can respond.

Share:

KELA report cover: Escalating Ransomware Threats to National Security

Ransomware has evolved from an enterprise risk into a strategic national security threat. Once driven primarily by profit, it is now leveraged by organized cybercriminals and state-linked actors to disrupt critical infrastructure, destabilize economies, and erode public trust.

In 2025, half of all ransomware attacks worldwide targeted essential sectors such as manufacturing, healthcare, energy, transportation, and finance — revealing a clear shift from opportunistic crime to systemic disruption.

In KELA’s new report, you’ll learn:

  • The ransomware trends shaping global risk in 2025 and 2026
  • The top actors driving large-scale attacks
  • Sector and geography-specific breakdowns of targets
  • Recommendations for building stronger cyber resilience

In KELA’s new report, you’ll learn:

Related Resources

KELA takes pre-attack intelligence to the next level: six new capabilities bring agentic AI to fusion-based threat hunting, investigation, built-in SOAR and early warning

KELA Takes Pre-Attack Intelligence to the Next Level, Turning Early Attacker Signals into Action Before Cyberattacks Launch

KELA and Hitachi Solutions enter into a cybersecurity partnership agreement to accelerate Active Cyber Defense in Japan

KELA Enters into Cybersecurity Partnership Agreement with Hitachi Solutions

KELA report banner: Qilin and Japan: Attackers Probing Japanese Networks Now, beside the report cover

Qilin and Japan: Attackers Probing Japanese Networks