Ransomware Attacks on Government Agencies Surge 91%
Government entities faced 1.4 daily ransomware attacks throughout the third quarter of 2026.
Updated on Oct. 30, 2026 in Cybersecurity
Live Poll
Do you trust your local government agencies to adequately protect your personal data from cyberattacks?
Ransomware attacks against government organizations spiked 91% annually, reaching 132 incidents during the third quarter of 2026. This equates to an average of 1.4 daily attacks as hackers increasingly target public agencies to disrupt critical services.
Why it matters
Hackers prioritize government organizations due to the high potential for significant service disruption, which often pressures agencies into considering ransom payments. The trend reflects a growing challenge for public infrastructure as digital extortion attempts become more frequent and costly.
Ransomware attacks rose 47% quarter-over-quarter, with the average demand exceeding $500,000. Anne Arundel County specifically faced a $2 million demand and the theft of 2.6TB of data by the group Rhysida.
The players
Rhysida
Rhysida is a ransomware group known for launching large-scale cyber extortion attacks against public and private sector organizations.
Unitel
Unitel is a state telecommunications agency in Angola that experienced weeks of service disruption due to a ransomware event.
Beaver County Behaviour Health
This health organization is a government-affiliated agency that opted to pay a $175,000 ransom following a cyberattack.
Anne Arundel County
This administrative region was the target of a significant ransomware incident involving a $2 million demand and the theft of 2.6TB of data.
The details
Hackers disrupt public services by encrypting essential systems and stealing sensitive information to leverage for ransom. While agencies often rely on regular data backups to restore operations, the financial and operational toll remains high, exemplified by Beaver County Behaviour Health paying $175,000 to resolve its incident.
Timeline
February 2025 marked the initial ransomware attack against Anne Arundel County.
Q2 2026 served as the baseline period for measuring attack frequency.
Q3 2026 saw a total of 132 recorded ransomware attacks on government organizations.
September 2026 was when notification letters were issued regarding the February 2025 breach.
The Tech Race
The modern rise in government ransomware attacks follows a pattern set by the 2017 WannaCry ransomware attack, which established the vulnerability of public infrastructure to global cyber extortion. These incidents illustrate how digital threats have evolved from widespread worms to targeted, high-value strikes.
Citizens may experience prolonged service disruptions at local government offices as agencies struggle to recover encrypted files or protect stolen data. This threat increases the likelihood that public agencies will implement stricter access controls and longer downtime periods during forensic investigations.
The takeaway
The increasing frequency of ransomware attacks highlights the necessity for government agencies to prioritize robust, air-gapped data backups to minimize downtime. Proactive investment in cybersecurity infrastructure is essential to mitigate the risk of multi-million dollar ransom demands.
Further reading
Learn more about evolving digital threats in the Cybersecurity section.
Live Poll
Do you trust your local government agencies to adequately protect your personal data from cyberattacks?
