New Delhi, Aug. 10 -- India's ransomware problem is becoming less about whether an attacker can breach a system and more about how much disruption an organization can absorb when one gets through.

As enterprises expand their use of cloud services, SaaS applications, connected infrastructure and digital systems, the number of potential entry points is also growing. At the same time, ransomware operators are becoming more deliberate about targeting organizations where downtime can create immediate financial and operational pressure.

According to Cyble's Asia Pacific Threat Landscape Report for Q1 2026, India recorded 45 ransomware incidents during the quarter, a 165% year-on-year increase. The report identified India as the most targeted ...