Ransomware Attacks on Indian Enterprises Increase 62% in 2026

A new report from cybersecurity researchers reveals that ransomware attacks on Indian enterprises have surged by 62% in 2026, with threat actors specifically targeting the manufacturing, healthcare, and financial services sectors.

Attack Trends

• Average ransom demand increased to ???3.2 crore (~$385,000)
• Double extortion tactics now used in 78% of attacks (data theft + encryption)
• Ransomware-as-a-Service (RaaS) groups targeting Indian SMEs with sub-???10 lakh demands
• Average downtime of 18.5 days per attack

Most Active Ransomware Groups

LockBit 3.0, BlackCat (ALPHV), and Akira have been the most active ransomware groups targeting Indian organizations. These groups are increasingly using AI-generated phishing emails to gain initial access to corporate networks.

Protection Recommendations

• Implement immutable backups with 3-2-1 backup strategy
• Deploy advanced endpoint protection with anti-ransomware capabilities
• Conduct regular tabletop exercises for incident response
• Segment networks to limit lateral movement
• Consider cyber insurance with SOC requirements