2025 Ransomware Report How Ransomware Wars Threaten Third-Party Cyber Ecosystems

Ransom payment values declined by 35%.

Publicly disclosed ransomware victims climbed to 6,046. This represents a 24% increase year over year for publicly disclosed victims. The victim count has also more than doubled since 2023.

Small and mid-sized businesses (SMBs) in the $4M-$8M range were the most frequently targeted.

Ransomware was responsible for 67% of known third-party breaches.

There has been a 123% increase in ransomware attacks over two years.

The number of publicly disclosed victims saw a 25% increase from the previous year (between April 2024 and March 2025)2. This follows an 81% surge in the period before that.

52 entirely new ransomware groups emerged in the last year.

There are now 96 active ransomware groups.