Latest cybersecurity reporting from selected sources.

Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed

International law enforcement operation led by Europol targets network of teenagers and young adults involved in ransomware attacks, extortion and other crimes

Accenture Cybersecurity warns over difficult to detect, “sophisticated toolset” being deployed as part of extortion campaigns

Ransomware victims surged in Q4 2025 despite fewer active extortion groups, with data leaks rising 50%, ReliaQuest researchers report

While ‘traditional’ ransomware attacks remain stable, some gangs are shifting towards exploiting zero-days and supply chains to go straight to stealing data

Cisco Talos has observed overlaps between Kraken and the earlier HelloKitty cartel through attack tactics using SMB flaws for big-game hunting and double extortion

Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics

Some admins of Hunters International are now part of the encryption-less cyber extortion group World Leaks

CISA and FBI warn of Medusa ransomware impacting over 300 victims across critical infrastructure sectors with double extortion tactics

Artivion has revealed in an SEC filing that it suffered a double-extortion ransomware attack

The BianLian ransomware group has shifted exclusively to exfiltration-based extortion and is deploying multiple new TTPs for initial access and persistence

Interlock employs both “big-game hunting” and double extortion tactics against its victims

Europol also said that multi-layered extortion tactics in ransomware are becoming more common

BlackCat tries unusual extortion technique

Extortion found to be most common impact from cyber-attacks in 2022

In several cases, the group did not deploy ransomware and performed extortion using stolen data