QBE warns ransomware attacks could increase by 40% in the next two years

Ransomware attacks are expected to increase by more than 40% over the next two years, with the number of victims listed on data leak websites forecast to exceed 7,000 by the end of 2026, according to new research from insurer QBE.

A cyber security report conducted by QBE in partnership with crisis consultancy Control Risks found that ransomware incidents have increased fivefold since 2020.

In 2024, 5,010 victims were publicly named on leak sites, compared to just 1,412 victims four years ago.

QBE also found that ransomware incidents in Q1 2025 nearly tripled year-on-year to 1,537, compared to 572 in the same period in 2024.

High-severity cloud vulnerability alerts increased 235% by 2024. One in 10 successful cyberattacks involved deepfake technology, causing losses of up to $20 million.

Additionally, the report said that between August 2023 and August 2025, government and administrative systems were the most frequently targeted sector worldwide , accounting for 19% of incidents, followed by the information technology and telecommunications sector with 18%.

The report highlights how cybercriminals are exploiting artificial intelligence (AI) and cloud vulnerabilities to access sensitive data and disrupt critical systems.

The company warns that the speed at which hackers are adopting digital technology is outpacing the speed at which many companies can adapt their defenses.

The amount of global data is expected to reach 200 zettabytes by 2025. Half of that data will be stored in the cloud, up from just 10% a decade ago. Of that, nearly half of the data businesses store online is now classified as sensitive, making it a prime target for ransomware.

Generative AI (GenAI) is also raising new cyber risks. About 78% of organizations are now deploying AI in at least one business function, up significantly from 55% a year ago.

While these technologies increase productivity, they also allow attackers to automate phishing, identity fraud, and extortion campaigns with unprecedented speed and accuracy.

To mitigate the growing risks, QBE recommends businesses strengthen their cyber resilience by mapping critical assets, defining acceptable levels of risk and testing crisis management plans.

QBE also recommends that businesses engage third-party expertise, encrypt sensitive data, implement advanced identity and access management protocols, and continuously monitor cloud environments.

Overall, QBE warns that generative AI is lowering the technical barrier for new cybercriminals to enter the profession, leading to greater and more serious risks. Therefore, businesses need to integrate cyber risk management into their technology systems from the beginning to be able to make the most of innovation, while still protecting operations, business continuity and trust./.

(TTXVN/Vietnam+)

Source: https://www.vietnamplus.vn/qbe-canh-bao-so-vu-tan-cong-ma-doc-tong-tien-co-the-tang-40-trong-2-nam-toi-post1069543.vnp