Ransomware tracker: the latest figures [May 2022]

* Note: this Ransomware Tracker is updated on the 10th day of each month to stay current *

Although the number of reported ransomware attacks remained stable throughout April, cybersecurity experts noticed that one group in particular boosted its activity.

The Conti ransomware gang was linked to at least 50 incidents in April, including a devastating attack on Costa Rican government agencies. The attack prompted the country’s newly-inaugurated president to declare a state of emergency, and the U.S. Department of State is offering a multimillion-dollar bounty for information that leads to the identification or arrest of Conti members, The Record’s Jonathan Greig reported.

But Conti wasn’t the only group launching attacks — ALPHV, Black Basta, LockBit 2.0, Cl0p, and others struck healthcare organizations, construction firms, government agencies, and a wide range of other organizations.

Here are some of our most critical findings:

Graphs from this ongoing project can be shared and reproduced with proper attribution.