Ransomware attacks surge 20% in July as criminals target vulnerable sectors
Finance and healthcare industries emerge as prime targets for cybercriminals
1Sharp rise in ransomware incidents
July 2024 saw a 20% global increase in ransomware attacks compared to the previous month. UK-based Comparitech recorded 799 incidents, making July the second-busiest month after March's 805 attacks. Over 40% of attacks targeted the US, while Germany ranked second with just 40 cases. The data reveals shifting patterns in cybercriminal behavior amid growing AI security concerns.
2Dramatic shifts in target sectors
Sectoral attack patterns showed significant changes. While attacks on utilities dropped 44%, legal firms and government agencies saw 31% and 11% decreases respectively. Conversely, finance companies endured 71% more attacks, tech firms 62%, and educational institutions 44%. Pharmaceutical companies and medical billing systems suffered 46% more ransomware incidents, highlighting healthcare's vulnerability.
3Healthcare sector at critical risk
DeepStrike's research indicates healthcare organizations are among most likely to pay ransoms. Even the financial sector, least likely to pay, still yields to demands 51% of time. Manufacturing (78%) and education (69%) show even higher payment rates. This payment propensity makes these sectors prime targets for ransomware gangs seeking guaranteed profits.
4Qilin and The Gentlemen dominate attacks
Qilin, behind June's NHS-disrupting Synnovis attack, claimed 125 victims in July. The rapidly growing newcomer The Gentlemen led with 135 attacks. Together these two gangs accounted for approximately 33% of July's ransomware incidents. Their success demonstrates how specialized cybercriminal groups are becoming increasingly sophisticated and prolific.
5Concerning infiltration methods
Trend Micro reports The Gentlemen primarily uses stolen credentials, while Qilin admitted exploiting zero-day vulnerabilities in its Synnovis attack. Both methods highlight fundamental security gaps. These ingress routes remain effective because many organizations still neglect basic cybersecurity hygiene like multi-factor authentication and prompt patching.
6Ransom payment culture fuels attacks
DeepStrike data reveals alarming payment rates: 78% in manufacturing, 69% in education, and 51% in finance. Such high likelihood of payment makes these sectors attractive targets. Cybersecurity experts warn this creates a vicious cycle, as successful attacks fund criminal operations and encourage more sophisticated future attacks against the same vulnerable sectors.
7Fundamental protections remain critical
Security professionals emphasize multi-factor authentication, system updates, and regular backups as most effective defenses. Particularly for sectors handling sensitive data, these basic measures significantly reduce attack success rates. The July surge demonstrates how neglecting these fundamentals leaves organizations exposed to increasingly aggressive ransomware campaigns.
8Traditional threats grow as AI dominates attention
While cybersecurity focuses on AI's transformative impact, traditional threats like ransomware continue escalating. July's data proves sectors prone to paying remain cybercriminals' primary targets. This underscores the enduring importance of basic cyber hygiene practices even as organizations invest in advanced security technologies to combat emerging AI-powered threats.