Cyber Security In India: In today’s time, India is rapidly moving towards digital economy, but with it the pace of cyber crime has also increased. Regarding which the recent report of threat intelligence firm Cyble has increased the concern. This report revealed that India was the second largest victim of ransomware cyber attacks in the Asia-Pacific (APAC) region in the first six months of this year to 2026. These figures clearly indicate that a big challenge has arisen before the digital security of the country.
77 ransomware attacks in 6 months, India ranked 9th in the world
Let us tell you that in the report of Cyble Research and Intelligence Labs (CRIL), it was said that between January 2026 and June 2026, 77 ransomware attacks were recorded in India. With this, India has reached 9th place in the global list of countries targeted by hackers. In the APAC region, only Thailand was ahead of India where 85 ransomware attacks were recorded during this period. Experts believe that with the rapid expansion of digital services, strengthening cyber security has become more important than ever.
Dangerous signs found in the report
During the report, researchers analyzed 496 ransomware attacks, 19 data leak incidents and 20 listings selling early access in the APAC region. The report also revealed that cyber threats are becoming increasingly complex and the role of government-backed hacking groups is also increasing. Of the 123 threat actor profiles monitored, 54 i.e. about 44% were Advanced Persistent Threat (APT) groups. These include groups like SideCopy, SharpPanda, Kimsuky and UNC3886, which have previously targeted government agencies, defense organizations and large IT networks.
Most attacks on these sectors
The report also said that the manufacturing sector was the most affected where more than 49 ransomware attacks were recorded. After this, there were 30 attacks on IT and IT-Enabled Services while 22 attacks were on Banking, Financial Services and Insurance (BFSI) sector. Healthcare, consumer goods, professional services and construction sectors were also the targets of hackers.
The Gentlemen, Qilin and LockBit most active
The report revealed that The Gentlemen was the most active Ransomware-as-a-Service (RaaS) operator, carrying out 114 attacks (23%) in APAC. This was followed by Qilin (64 attacks) and LockBit (38 attacks). These three groups together carried out more than two-fifths of the recorded ransomware attacks in the region. According to the report, 3,836 ransomware attacks and 367 data leak incidents were reported across the world in the first half of 2026, which is a clear indication of the increasing challenges regarding cyber security.
