Why Ransomware Payments Are Plummeting: New Trends & Insights
Ransomware Payments Hit a Historic Low
In an exciting turn of events, fewer companies are giving in to the demands of ransomware attackers. Recent data shows just 23% of ransomware victims paid up during the third quarter of 2025—a historic low. Coveware’s report suggests this decline is part of a larger trend across all forms of cyber extortion, such as data encryption and unauthorized access.
This downward trajectory signals a positive shift. It seems that the allure of ransomware schemes is fading, as businesses become more resilient against these cyber threats. For cybersecurity professionals, this might be a good time to reflect on existing strategies to fortify defenses even further.
Double Extortion Losing Its Power
Notably, the costs of ransomware payouts are dropping too. The average payment has plummeted by 66% to just $376,941, while the median payment is now $140,000, marking a 65% decrease from earlier figures this year. Once centered on locking you out of your files, ransomware tactics now involve threats of leaking stolen data online—a strategy known as “double extortion.” Yet, only 19% of businesses facing such threats chose to pay, illustrating how ineffective these methods have become.
It’s clear businesses are adapting. Coveware highlights this adaptability, noting it as a fundamental shift in the battle against cyber extortion. As threats evolve, staying ahead with robust security protocols is crucial for maintaining this momentum against cybercriminal activity.
[Qsentinel Call-to-Action: Stay ahead of cyber threats by boosting your organization’s cybersecurity measures. Subscribe to our newsletter for the latest in tech and security insights.]Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more
