Zscaler ThreatLabz sees ransomware data theft up 275% year over year to 896 TB

By Public Technologies
  • Zscaler flagged a 275% year-over-year jump in ransomware-related data theft in April 2025–March 2026.
  • Exfiltrated data reached 896 terabytes, signaling a shift from encryption-led disruption to large-scale theft-driven extortion.
  • Blockchain transactions tied to ransomware payments totaled $328 million; the average ransom payment rose 5.3% to $431,995.
  • Manager-level roles or higher accounted for 62% of victims, underscoring increased targeting of privileged, business-critical users.
  • Trusted workplace tools, including Microsoft Teams, were increasingly abused to support social engineering, lateral movement, data theft, file encryption.


Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. Zscaler Inc. published the original content used to generate this news brief via GlobeNewswire (Ref. ID: 202609300301PRIMZONEFULLFEED9836696) on September 30, 2026, and is solely responsible for the information contained therein.

Capital.com is an execution-only brokerage platform and the content provided on the Capital.com website is intended for informational purposes only and should not be regarded as an offer to sell or a solicitation of an offer to buy the products or securities to which it applies. No representation or warranty is given as to the accuracy or completeness of the information provided.

The information provided does not constitute investment advice nor take into account the individual financial circumstances or objectives of any investor. Any information that may be provided relating to past performance is not a reliable indicator of future results or performance.

To the extent permitted by law, in no event shall Capital.com (or any affiliate or employee) have any liability for any loss arising from the use of the information provided. Any person acting on the information does so entirely at their own risk.

Any information which could be construed as “investment research” has not been prepared in accordance with legal requirements designed to promote the independence of investment research and as such is considered to be a marketing communication.