The health care sector had the highest average ransom paid of any industry, at $847,875.

Ransomware deployment occurs in as little as six hours

54% of ransom-paying victims recovered their data—down from 73% two years ago.

The average response time to ransomware attacks is 6.71 hours among financial institutions. Last year's average response time to ransomware attacks was 6.62 hours.

Only half of organisations that pay ransoms actually recover their data.

Ransomware payments dropped by 35% worldwide in 2024

Ransomware attacks increased by nearly 20% in 2024.

The average ransom demand was $957K, and the average ransom paid was $317K. This means the price was often negotiated down by more than half.

The industries most heavily impacted by ransomware in Q1 2025 were manufacturing, retail, and technology. Notably, the non-profit sector saw a dramatic surge in ransomware attacks, with incidents doubling quarter-over-quarter .

There was also a record high number of active threat groups, with 70 identified in Q1 2025. This is a 55.5% year-over-year rise.

The average cost of third-party ransomware incidents jumped by 72% to $241K.

VPNs alone accounted for two-thirds (66%) of all ransomware attacks.

Mid-sized companies generating $25-100M in revenue saw a 46% increase in ransomware attacks.

Geographically, 59% of observed ransomware victims in Q1 2025 were based in The United States, which is the highest proportion seen to date.

The first quarter of 2025 saw a record high in ransomware attacks, with 2,063 victims reported. This represents a 102% increase compared to the previous year.

Ransomware gangs claimed responsibility for targeting 6,133 victims in 2024.

The blast radius of ransomware continues to grow as businesses impacted by attacks on vendors and partners increased 43%.

There was a 75% increase in actively exploited flaws compared to the same period in 2024, with 12,333 vulnerabilities reported in Q1 alone .

There was also a record high number of active threat groups, with 70 identified in Q1 2025. This is a 55.5% year-over-year rise.

Close to 50 ransomware groups were implicated in attacks in 2024, a 3X increase from 2021.