Ransomware Surge: Profits Fall Despite Incidents

Ransomware incidents experienced a substantial 50% rise in 2025, according to new research. While the number of attacks escalated, the total extortion revenue collected by cybercriminals amounted to approximately $820 million. This figure is expected to increase as more attacks are identified.

Despite the surge in incidents, the proportion of victims paying ransoms has continued to decrease for the fourth consecutive year. In 2025, only 28% of victims paid, a significant drop from 62.8% in 2024 and 78.9% in 2022. This trend is attributed to improved incident response, increased regulatory scrutiny, and international efforts against ransomware operations.

However, hackers are compensating for lower payment rates by demanding higher amounts from those who do pay. The median ransom payment saw a dramatic 368% increase, rising from $12,738 in 2024 to $59,556 in 2025. The number of active extortion groups also grew, with 85 identified groups targeting businesses, particularly in the US, Canada, Germany, and the UK.