Coveware

The average ransom payment in Q2 2025 rocketed to $1.13 million, marking a 104% increase from Q1 2025.

The median ransom payment in Q2 2025 reached $400,000, which is a 100% increase from Q1 2025.

The industries hit hardest by ransomware in Q2 2025 were Professional services: 19.7%, Healthcare: 13.7%, and Consumer services: 13.7%.

The top ransomware variants in Q2 2025 were: Akira (19%), Qilin (13%), and Lone Wolf (9%).

Data exfiltration was a factor in 74% of all ransomware cases in Q2 2025.

The overall rate of organizations paying ransoms in Q2 2025 held steady at 26%.

Mid-sized companies (defined as 11 to 1,000 employees) constituted 64% of ransomware victims in Q2 2025.