Ransomware Attacks Surge 50% in 2025 While Ransom Payments Decline
Ransomware attacks skyrocketed by 50% in 2025, with nearly 8,000 breach incidents reported. Paradoxically, on-chain ransom payments fell to approximately $820 million, marking an 8% decline year-over-year. The disconnect between attack volume and revenue highlights a strategic shift in cybercriminal operations.
Small and medium enterprises have become primary targets due to their tendency to pay quickly. Regulatory pressures and improved corporate defenses have forced ransomware groups to adopt a high-volume, low-margin approach. The business model now resembles an automated production line rather than targeted heists.
Infostealers and AI-driven phishing tools have lowered the barrier to entry, enabling mass attacks. Observers note the industrialization of cybercrime, where steady cash Flow trumps occasional big payouts. The trend reflects broader changes in both criminal tactics and defensive capabilities across industries.
