Ransomware Payments Decline Amid Attack Surge

In an unexpected twist, new data reveals that fewer businesses are yielding to ransomware demands, even as attacks increase. A report from Chainalysis highlights a 50% surge in attacks throughout 2025, with cybercriminals amassing approximately $820 million. Despite more threats, the payment rate has dropped significantly to only 28%, down from 62.8% in 2024 and 78.9% in 2022. This shift indicates businesses are becoming more careful and strategic in dealing with ransomware.

Several factors contribute to this trend. Improved incident response, heightened regulatory oversight, and international efforts against ransomware are key. Additionally, some hackers face challenges. For instance, exploits like those used by VolkLocker have allowed victims to bypass payments by decrypting their data independently.

Ransom Demands Skyrocket for Those Who Pay

While fewer companies are paying ransoms, the ones who do face higher demands. The median ransom has risen by 368% compared to last year, jumping from $12,738 in 2024 to $59,556 in 2025. This suggests that although defiance is rising, those compliant face escalating threats.

Furthermore, the number of active ransomware groups has increased to 85. The United States remains their primary focus, but groups are also targeting businesses in Canada, Germany, and the United Kingdom more frequently. Despite these challenges, the drop in payment rates signals a shift towards more resistant stances against cyber extortion, possibly reshaping future ransomware dynamics.

Stay informed. Stay prepared. Follow Qsentinel for the latest updates.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.