Ransomware Is Accelerating, but It's Not Because of AI

July 21, 2026 · Dark Reading · Severity: CRITICAL

Ransomware attacks are accelerating globally, but contrary to popular narrative, this acceleration is not primarily driven by artificial intelligence. Instead, the ransomware ecosystem is evolving through fragmentation of existing groups into smaller, more agile offshoots and the rise of data-theft-only extortion where attackers steal sensitive data and demand payment without deploying any encryption at all. This fragmentation increases the number of active threat actors even as law enforcement takedowns disrupt major groups, while data-theft-only extortion lowers the technical barrier for entry because attackers do not need sophisticated ransomware payloads — they only need data access and a willingness to threaten exposure.