Ransomware payment rate drops to record low as attacks surge

Bleeping Computer

by Bill Toulas

February 26, 2026

AI-Generated Deep Dive Summary

The number of ransomware victims paying attackers has dropped to a record low of 28% in 2025, marking an all-time low despite a significant rise in reported attacks. According to Chainalysis, blockchain intelligence platform, the total on-chain ransomware payments reached $820 million in 2025, with the figure expected to exceed $900 million as more events are tracked. While ransomware attacks surged by 50% year-over-year, the payment rate has steadily declined over the past four years—from 62.8% in 2024 and 78.9% in 2022—highlighting a shift in how victims respond to threats. Several factors have contributed to this downward trend, including improved incident response strategies, increased regulatory scrutiny, international law enforcement efforts, and market fragmentation within the ransomware ecosystem. Despite these developments, the median ransom payment has surged by 368% since 2024, rising from $12,738 to $59,556 in 2025. This reflects a growing trend where victims pay larger sums in hopes of securing the deletion of stolen data and preventing its sale or misuse by cybercriminals. The ransomware landscape has also evolved with the rise of initial access brokers (IABs), who sell network access to ransomware operators. While IAB revenue remained steady at $14 million in 2025, representing only 1.7% of total ransomware revenue, their role as a key enabler of attacks continues to grow. The declining cost of network access—dropping from $1,427 in Q1 2023 to $439 in Q1

Verticals

securitytech

Originally published on Bleeping Computer on 2/26/2026