Ransomware payments rose across surveyed organizations as attacks became fewer but more costly
Target Trend
Summary
Hide ▲
Show ▼
Ransomware payments climbed to $3.6m in 2025 even as overall attacks declined, signaling a higher-impact trend for surveyed organizations. The shift matters because fewer intrusions are producing larger payouts, longer containment times, and more downtime across multiple sectors.
Related Happenings
2025 Ransomware payments decline as victim counts surge
Target Trend
First: 02.03.2026 12:45
Last: 02.03.2026 12:45
Sources 1
About this happening:
**Ransomware victim counts** surged **50% YoY in 2025** even as total payments fell **8% to $820m**, showing that extortion volume rose while monetization weakened. The **payment...
2025 Ransomware payments decline as victim counts surge
Target TrendAbout this happening: **Ransomware victim counts** surged **50% YoY in 2025** even as total payments fell **8% to $820m**, showing that extortion volume rose while monetization weakened. The **payment...
DragonForce shifts ransomware-as-a-service into a cartel-style affiliate umbrella
Threat Actor Meta
First: 05.02.2026 00:14
Last: 05.02.2026 00:14
Sources 1
About this happening:
**DragonForce** has shifted into a **cartel-style ransomware-as-a-service model**, letting affiliates launch their own brands while sharing a common umbrella. That change expands...
DragonForce shifts ransomware-as-a-service into a cartel-style affiliate umbrella
Threat Actor MetaAbout this happening: **DragonForce** has shifted into a **cartel-style ransomware-as-a-service model**, letting affiliates launch their own brands while sharing a common umbrella. That change expands...
Ransomware incidents peaked in 2023 and fell in 2024 across major industries
Target Trend
First: 08.12.2025 23:07
Last: 08.12.2025 23:07
Sources 1
About this happening:
Ransomware payments **peaked in 2023** and fell in **2024**, signaling a broad shift in attacker yield across major business sectors. The trend spans **4,194 incidents** from **Ja...
Ransomware incidents peaked in 2023 and fell in 2024 across major industries
Target TrendAbout this happening: Ransomware payments **peaked in 2023** and fell in **2024**, signaling a broad shift in attacker yield across major business sectors. The trend spans **4,194 incidents** from **Ja...
Q3 2025 ransomware victim disclosures remained elevated across monitored leak sites
Target Trend
First: 14.11.2025 12:37
Last: 14.11.2025 12:37
Sources 1
About this happening:
Ransomware victim disclosures remained **elevated in Q3 2025**, with **1,592 new victims** posted across **more than 85 leak sites**. The average of **535 disclosures per month**...
Q3 2025 ransomware victim disclosures remained elevated across monitored leak sites
Target TrendAbout this happening: Ransomware victim disclosures remained **elevated in Q3 2025**, with **1,592 new victims** posted across **more than 85 leak sites**. The average of **535 disclosures per month**...
Ransomware-as-a-service ecosystem splinters into 85-group market in Q3 2025
Threat Actor Meta
First: 14.11.2025 12:37
Last: 14.11.2025 12:37
Sources 1
About this happening:
**Q3 2025** marked a major **ransomware ecosystem** shift as **85 active groups** and **14 new brands** pushed the market toward fragmentation. The change raises risk because **fo...
Ransomware-as-a-service ecosystem splinters into 85-group market in Q3 2025
Threat Actor MetaAbout this happening: **Q3 2025** marked a major **ransomware ecosystem** shift as **85 active groups** and **14 new brands** pushed the market toward fragmentation. The change raises risk because **fo...
Timeline
-
21.10.2025 16:00 2 articles · 7mo ago
Ransomware payments rise across surveyed organizations
Campaign Scope UpdateExtraHop's 2025 Global Threat Landscape Report finds ransomware payments climbed to $3.6m in 2025 from $2.5m in 2024 across surveyed organizations, even as reported incidents fell about 25% from 2024. The report links the shift to fewer, more targeted operations by groups such as RansomHub, LockBit and DarkSide, with public cloud infrastructure, third-party integrations and generative AI applications expanding the attack surface; affected organizations paid the ransom in 70% of cases, and average containment took over two weeks with about 37 hours of downtime.
Show sources
- Ransomware Payouts Surge to $3.6m Amid Evolving Tactics — www.infosecurity-magazine.com — 21.10.2025 16:00
- Ransomware Payouts Surge to $3.6m Amid Evolving Tactics — www.infosecurity-magazine.com — 21.10.2025 16:00