Ransomware tracker: the latest figures [May 2022]
Adam Janofsky May 10, 2022

Ransomware tracker: the latest figures [May 2022]

Ransomware tracker: the latest figures [May 2022]

* Note: this Ransomware Tracker is updated on the 10th day of each month to stay current *

Although the number of reported ransomware attacks remained stable throughout April, cybersecurity experts noticed that one group in particular boosted its activity.

The Conti ransomware gang was linked to at least 50 incidents in April, including a devastating attack on Costa Rican government agencies. The attack prompted the country’s newly-inaugurated president to declare a state of emergency, and the U.S. Department of State is offering a multimillion-dollar bounty for information that leads to the identification or arrest of Conti members, The Record’s Jonathan Greig reported.

But Conti wasn’t the only group launching attacks — ALPHV, Black Basta, LockBit 2.0, Cl0p, and others struck healthcare organizations, construction firms, government agencies, and a wide range of other organizations.

Here are some of our most critical findings:

Graphs from this ongoing project can be shared and reproduced with proper attribution.

Adam is the founding editor-in-chief of The Record by Recorded Future. He previously was the cybersecurity and privacy reporter for Protocol, and prior to that covered cybersecurity, AI, and other emerging technology for The Wall Street Journal.