Ransomware Against Telecoms Rose Fourfold Between 2022 and 2025

Sector research records ransomware attacks against telecommunications companies worldwide rising approximately fourfold between 2022 and 2025.

This desk discounted an 80% single-year jump at 25-0423 on the grounds that attack patterns do not move that fast and the change was probably methodology.

A fourfold rise across three years is a different claim. It is roughly 60% compound annual growth, which is fast but not implausible, and a longer baseline is less sensitive to a single year’s dataset changes. The same caution about tracking coverage still applies — more monitoring finds more listings — but the finding survives more of it.

Almost every incident in this corpus assumes working connectivity. The manual fallback at 25-0902 assumed phones. The service-desk social engineering at 25-0512 was conducted by telephone. The second factor in 25-0813 arrives by SMS.

A sector whose failure would degrade the response to every other incident is not one where a fourfold rise should be filed as sector news.

They are large, regulated, well-resourced, and operate networks engineered for continuity. Encrypting a national operator’s core network is not a realistic objective for most groups.

What is realistic is the corporate estate — billing, customer management, support — which is where the incidents at 25-0804 and 25-0909 actually landed. The rise is in data extortion against business systems, not in threats to the network, and the two should not be conflated.