Report by Chainalysis
35% Year-over-Year Decrease in Ransomware Payments, Less than Half of Recorded Incidents Resulted in Victim Payments
Key Findings
Ransomware payment activity slowed after July 2024 by approximately 34.9%.
Incident response data indicates around 30% of negotiations lead to payments.
LockBit saw 2024 H2 payments decrease by approximately 79% due to law enforcement collaboration.
In H2 2024, there was a 53% difference between the amounts demanded and paid in ransomware incidents.
The value extorted by ransomware attackers between January and June 2024 was 2.38% higher than the same period in 2023.
39% of ransom funds flowed through centralized exchanges (CEXs), slightly above the 37% average between 2020 and 2024.
56 new data leak sites emerged in 2024, more than double the number identified in 2023.
Ransomware payments decreased 35% year-over-year, with approximately $813.55 million in payments in 2024, down from $1.25 billion in 2023.