Ransomware attacks fell by 43% globally in Q2 2025 compared to Q1, with law enforcement actions and internal conflicts having a major impact on the threat landscape, according to new findings from NCC Group. A total of 1180 attacks were recorded from April to June, which compares to 2074 attacks in Q1. The firm also observed that claimed ransomware attacks fell for the fourth consecutive month in June 2025, down by 6% from May to 371. The slowdown in Q2 followed a dramatic rise in attacks in the first three months of the year, which was driven by aggressive campaigns from dominant groups such as Clop, RansomHub and Akira. However, recent law enforcement activity has disrupted some key ransomware operators, including targeting Clop and RansomHub affiliates. Notably, Clop and RansomHub…