Report by Coveware

Targeted social engineering is en vogue as ransom payment sizes increase

7 FINDINGSPublished Aug 12, 2025
View Original Report →

Key Findings

The average ransom payment in Q2 2025 rocketed to $1.13 million, marking a 104% increase from Q1 2025.

CovewareTargeted social engineering is en vogue as ransom payment sizes increase·Aug 12, 2025
Ransomware

The median ransom payment in Q2 2025 reached $400,000, which is a 100% increase from Q1 2025.

CovewareTargeted social engineering is en vogue as ransom payment sizes increase·Aug 12, 2025
Ransomware

The industries hit hardest by ransomware in Q2 2025 were Professional services: 19.7%, Healthcare: 13.7%, and Consumer services: 13.7%.

CovewareTargeted social engineering is en vogue as ransom payment sizes increase·Aug 12, 2025
Ransomware

The top ransomware variants in Q2 2025 were: Akira (19%), Qilin (13%), and Lone Wolf (9%).

CovewareTargeted social engineering is en vogue as ransom payment sizes increase·Aug 12, 2025
Ransomware

Data exfiltration was a factor in 74% of all ransomware cases in Q2 2025.

CovewareTargeted social engineering is en vogue as ransom payment sizes increase·Aug 12, 2025
Ransomware

The overall rate of organizations paying ransoms in Q2 2025 held steady at 26%.

CovewareTargeted social engineering is en vogue as ransom payment sizes increase·Aug 12, 2025
Ransomware

Mid-sized companies (defined as 11 to 1,000 employees) constituted 64% of ransomware victims in Q2 2025.

CovewareTargeted social engineering is en vogue as ransom payment sizes increase·Aug 12, 2025
Ransomware