Home / Business and Economy / Ransomware Revenue Soars 40% as Criminals Buy Access
Ransomware Revenue Soars 40% as Criminals Buy Access
2 Jun
Summary
- Ransomware revenue surged by nearly 40% in Q1 year-on-year.
- Access brokers on the dark web simplify network intrusions for groups.
- Ransomware operations display resilience, outperforming legitimate businesses.
Ransomware groups saw a significant revenue surge of nearly 40% in the first quarter of 2026 compared to the same period in 2025, amassing an estimated $529.2 million. This financial growth highlights a maturing cybercriminal industry.
The increase is largely driven by the proliferation of initial access brokers. These brokers operate on dark web marketplaces, selling pre-obtained access to target infrastructures. This model allows ransomware groups to bypass the need for extensive technical expertise in breaking into networks.
Furthermore, ransomware operations are demonstrating remarkable resilience. Researchers note that disruptions like removing a single group or server rarely collapse the wider ecosystem, as it is designed for continued functionality. This adaptability has led to the criminal enterprises achieving a level of resilience that ironically surpasses many legitimate businesses.
