Crypto Crime Report 2026 Shows 8% Decline in Ransomware Revenue Amid Rising Attacks
Ransomware revenue dropped to $820 million in 2025, down from $892 million the previous year, marking a second consecutive year of decline. The dip comes despite a 50% surge in reported attacks, with only 28% of victims paying ransoms—a record low.
Improved cybersecurity measures, stricter policies, and global crackdowns have emboldened resistance. Attackers now increasingly target small and medium-sized enterprises, yet median ransom payments skyrocketed 368% to $59,556 as gangs pursue higher-value targets.
The ransomware ecosystem has fragmented, with 85 active extortion groups operating in 2025 compared to a handful of dominant players in prior years. This diversification suggests attackers are adapting to shrinking payouts through specialization and scaled operations.