Skip to main content
Signal8

Full Access with Signal8 Pro, $49/mo billed annually.

New Zscaler Report Reveals AI-Assisted Attackers Move to Massive Data Theft, Executive Targeting, and Millions in Extortion Payments

$ZSPress releaseSep 30, 2026, 3:01 AM ETRead the release

Zscaler released its ThreatLabz 2026 Ransomware Report, finding AI-assisted ransomware drove a more than 275% year-over-year increase in data theft, reaching 896.2 terabytes of exfiltrated data. Ransomware payments tracked via blockchain totaled $328 million, with the average payment up 5.3% to $431,995, and 62% of victims holding manager-level titles or above. ThreatLabz tracked 7,366 leak-site victims, down just 3% YoY, with 52 newly active ransomware groups identified; attackers increasingly abuse trusted tools like Microsoft Teams and Quick Assist.

Key figures

Leak site victims
7366
Average ransom yoy
+5.3%
Newly active groups
52
Stolen data terabytes
896.2
Average ransom payment
$431,995
Ransomware payments usd
$328 million
Manager level victim share
62%
Ransomware data theft yoy growth
+275%

AI analysis

The rest of the AI analysis, red flags and sentiment are part of Signal8 Pro.

AI-generated analysis of a public disclosure. Not investment advice; verify against the original document.