2025 Ransomware Report How Ransomware Wars Threaten Third-Party Cyber Ecosystems

Ransom payment values declined by 35%.

There are now 96 active ransomware groups.

Publicly disclosed ransomware victims climbed to 6,046. This represents a 24% increase year over year for publicly disclosed victims. The victim count has also more than doubled since 2023.

52 entirely new ransomware groups emerged in the last year.

Small and mid-sized businesses (SMBs) in the $4M-$8M range were the most frequently targeted.

Ransomware was responsible for 67% of known third-party breaches.

There has been a 123% increase in ransomware attacks over two years.

The number of publicly disclosed victims saw a 25% increase from the previous year (between April 2024 and March 2025)2. This follows an 81% surge in the period before that.