According to Fortinet, the global cybersecurity firm, a sharp spike in AI-driven cybercrime is underway, with a reported 389% increase in ransomware victims. This metric signals a material shift in threat actor methodology—moving from manual, targeted campaigns toward automated, scalable attack frameworks that can identify and exploit vulnerabilities at machine speed.
Why this matters: Ransomware remains one of the most disruptive attack vectors against critical infrastructure, healthcare systems, financial networks, and government agencies. When threat actors layer AI capabilities into reconnaissance, lateral movement, and encryption deployment, response windows compress. Defenders operating on manual or semi-automated playbooks face asymmetric disadvantage.
The 389% figure, while striking, requires context. Fortinet reports threat intelligence; the underlying data on victim count, timeframe, and geographic distribution is not detailed in available sourcing. What is clear: Fortinet, as a major defensive player, is flagging this as a priority signal.
The intersection of AI and ransomware escalates several systemic risks. First, automated vulnerability scanning can target entire sectors simultaneously. Second, AI-assisted payload customization may evade signature-based detection. Third, the speed of attack deployment reduces mean-time-to-response for human teams and legacy incident response tools.
Historically, major shifts in attack methodology (from worms to botnets to ransomware-as-a-service) have preceded widespread infrastructure disruptions. The WannaCry outbreak in 2017 spread globally in hours; NotPetya followed weeks later. Both exploited automation at scale. The introduction of AI-driven tooling to that baseline suggests the next wave may move faster and with higher precision against critical targets.
Monitor: Watch for public disclosures from CISA, healthcare sector ISACs, and critical infrastructure operators on mean-time-to-detection and response metrics. A visible compression in those timelines would confirm that defensive capabilities are falling further behind.
