France’s Cybersecurity Agency Reports Ransomware Attack Drop in 2025
France’s Cybersecurity Agency Reports Ransomware Attack Drop in 2025
https://www.infosecurity-magazine.com/news/france-anssi-ransomware-attack/
Publish Date: 2026-03-11 12:50:00
Source Domain: www.infosecurity-magazine.com
The French Cybersecurity Agency (ANSSI) has confirmed the decline of known ransomware attacks in 2025, in part due to successful law enforcement operations.
The latest edition of the agency’s annual threat report, published on March 11, dives into the range of cyber threats that French public and private organizations have faced in 2025.
According to ANSSI data, there were 128 ransomware attacks reported in France in 2025, slightly fewer than the 141 such attacks recorded in 2024.
Nevertheless, the agency highlighted that ransomware compromises remained a significant threat and represent a substantial share of the over cybercriminal activity.
The report also noted that, while ANSSI’s partnering security vendors frequently warn about an uptick in encryption-less cyber extortion attacks such incidents have been limited, according to the agency’s data.
Small and medium businesses (SMBs) remained the organizations most targeted by ransomware, but public and private healthcare entities and education organizations have experienced the biggest year-over-year increase.
The most prevalent ransomware strains observed by ANSSI in 2025 were Qilin (21%), Akira (9%), and LockBit 3.0/LockBit Black (5%).
Additionally, more than a dozen strains (notably Nova, Warlock and Sinobi) were observed for the first time in 2025 in at least one incident.
ANSSI assessed that the drop in ransomware attacks is at least partly due to the successful preventive intervention of cyber defenders, including those from the French agency, and large-scale law enforcement operations.
One of the most impactful efforts was Operation Endgame, which ANSSI said disrupted a large part of the ransomware landscape and undermined trust within the cybercriminal ecosystem.
Cyber Incidents Treated by ANSSI Remain Stable
Overall, ANSSI received 3586 cyber alerts that involved the support of the agency in 2025, an 18% drop compared to 2024. However, this decline can be partly explained by a spike of…
