The report found a median account takeover exposure rate of 1.4% among platforms ranging from 5 million to 300 million users.

RansomHub's sudden offline status triggered affiliate migration to Qilin and cartel shifts, signaling major RaaS disruption.