Ransomware Payments: A Mixed Bag in 2025

In an intriguing twist, ransomware payments dropped by 8% in 2025, despite a 50% spike in attacks. Chainalysis, a blockchain analytics firm, reports that attackers are fetching higher payouts from fewer victims, a shift from the previous year. While total attacks surged, overall revenue took a dip, reaching $820 million, potentially nearing $900 million with future data.

Victim numbers hit record highs, yet only 29% chose to pay, a significant decline from 63% the year before. This trend, according to Chainalysis, is a positive sign, suggesting that attackers face more hurdles for less reward. This could alter the financial lure driving these attacks.

Key Ransomware Trends

• Improved Incident Response: Enhanced strategies and stricter regulations mean fewer organizations pay ransoms.
• Global Crackdown: Concerted efforts to cut revenue streams from ransomware operations.
• Ransomware Weaknesses: Vulnerabilities in certain strains allow data recovery without payment.
• Fragmentation of RaaS: About 85 small ransomware groups are noted, shifting the landscape.

For organizations that pay, costs soared, with the median ransom rising by 368% to $59,556 in 2025. Tactics have intensified, including targeting employees and leveraging stolen data threats, pushing demands higher.

The opportunistic nature of attackers means they exploit vulnerabilities as they appear, leaving no industry untouched. Notably, the manufacturing and financial sectors were hardest hit, particularly in the U.S., Canada, Germany, and the UK.

Infrastructure remains a stronghold; payments to initial access brokers hit new highs at $14 million. Disrupting these networks could significantly impact both cybercrime and state-sponsored actions, highlighting their critical role in cyber threats today.

[Qsentinel: Your trusted source for cybersecurity news and insights.]

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.