Ransomware payments drop to record low, even as attacks surge

By Sead Fadilpa?i? published 23 hours ago

Fewer businesses are paying ransomware attackers

Chainalysis finds ransomware incidents rose 50% in 2025, extortion totaled around $820m
Payment rate dropped to 28%, down from 62.8% in 2024 and 78.9% in 2022
Median ransom payment surged 368% to $59,556

Ransomware groups have never been this active, but have also never extorted this little money, new research has claimed.

Market analysts Chainalysis found the number of ransomware incidents in 2025 rose by 50% compared to the previous year, earning criminals $820 million - although this number may still rise as more incidents are attributed to ransomware attacks.

The increase in successful attacks should automatically translate to higher payments, but that didn't happen - and in fact, Chainalysis says the number
of payments remained relatively flat, which in absolute numbers means there were actually a lot fewer companies paying ransomware attackers.

Extracting value from victims

That being said, the researchers believe the number of ransomware victims who actually paid dropped to almost a quarter (28%). This means that for the fourth consecutive years, businesses have been paying less and less to cybercriminals.

In 2024, the payment rate was 62.8%, and a few years prior - in 2022 - it was at 78.9%.

There are numerous reasons causing this trend, the researchers further explain, saying that improved incident response and increased regulatory scrutiny played a major role.

Then, there are effective international actions against ransomware operators, infrastructure, and laundering, which definitely constrained "some revenue flaws". Finally, errors on the criminals' side, such as the VolkLocker
weakness that allowed free decryption, lifted some of the pressure from the victims.

But it appears as if hackers don't really want to work harder, so from those that do pay - they demand more. Chainalysis says that the median ransom payment rose by 368% year-on-year, from $12,738 in 2024 to $59,556 in 2025.

Despite the somewhat grim outlook, ransomware doesn't seem to be losing its popularity in the criminal underworld. The report states there are currently 85 active extortion groups, a lot more than in previous years. Crooks were most active against US businesses, but those in Canada, Germany, and the UK, as well.


https://www.techradar.com/pro/security/ransomware-payments-drop-to-record-low-e ven-as-attacks-surge

$$
--- SBBSecho 3.28-Linux
* Origin: Capitol City Online (1:2320/105)