Ransomware attacks have surged by 50% in February compared to the previous month, reaching an unprecedented level of 886 cases, according to a report by NCC Group. The report highlights a 119% increase in ransomware incidents from February 2024, where there were 403 recorded attacks. Key findings from the research pin the cyber gang Cl0p as the most active group responsible for 37% of these attacks. Cl0p's activity rose dramatically, with the group accounting for 330 attacks, marking a 460% rise from January's figures. This surge is linked to the group's exploitation of vulnerabilities in file transfer software, Cleo, resulting in multiple breaches in late 2024. "Ransomware victim numbers hit record highs in February, surging 50% compared to January 2025, with Cl0p leading the charge. Unlike traditional ransomware operations, Cl0p's activity wasn't about encrypting systems—it was about stealing data at scale," noted Matt Hull, Head of Threat Intelligence at NCC Group.