The Q2 2026 ransomware numbers grab attention: 90 groups hit 2,252 victims across 99 countries, new players muscled into the top ranks, and longtime leaders cratered by as much as 91%. Those are strong headlines. But the attack techniques and targeting decisions behind them are what determine your risk through the rest of 2026.

Read the headline and you know what happened. Understand the attacks behind it and you know what to do next.

Join us for an exclusive first look at the Q3 ReliaQuest Ransomware Report, before it goes public. Our analysts will connect the movement in the numbers to the tradecraft driving it:

• The attacks reshaping the rankings — the techniques and targeting behind the quarter's biggest moves

• Where the pressure is concentrating — the sectors and regions under sustained fire, and how to map them to your own footprint

• The newcomer to watch — a low-volume operator using methods built to defeat controls most enterprises trust, from kernel-level EDR evasion to infrastructure defenders can't block

• What's coming in Q3 — our analysts' read on where these techniques spread and where affiliates move next