KELA REPORT

Escalating Ransomware Threats to National Security

How ransomware groups target critical sectors and government, what KELA observed across the cybercrime underground, and how nations can respond.

Share:

KELA report cover: Escalating Ransomware Threats to National Security

Ransomware has evolved from an enterprise risk into a strategic national security threat. Once driven primarily by profit, it is now leveraged by organized cybercriminals and state-linked actors to disrupt critical infrastructure, destabilize economies, and erode public trust.

In 2025, half of all ransomware attacks worldwide targeted essential sectors such as manufacturing, healthcare, energy, transportation, and finance — revealing a clear shift from opportunistic crime to systemic disruption.

In KELA’s new report, you’ll learn:

  • The ransomware trends shaping global risk in 2025 and 2026
  • The top actors driving large-scale attacks
  • Sector and geography-specific breakdowns of targets
  • Recommendations for building stronger cyber resilience

In KELA’s new report, you’ll learn:

Related Resources

KELA and Fujitsu enter into a cybersecurity collaboration agreement to accelerate Active Cyber Defense in Japan

KELA and Fujitsu Enter into Cybersecurity Collaboration Agreement

Abstract lattice graphic showing where AI provider monitoring stops, cover image for the KELA AI Cybercrime Report Q4 2026

KELA AI Cybercrime Report Q4 2026: Inside the criminal market for adversarial AI

KELA on-demand webinar banner: The TeamPCP arrests, from the inside, with Ben Kapon and Jimmy

The TeamPCP arrests, from the inside