The services industry recorded a 118% year-on-year increase in ransomware attack volume in 2025.

The healthcare sector accounted for 22% of all disclosed ransomware attacks in 2025.

The education sector saw ransomware attacks decrease by approximately 12% year-on-year in 2025.

Approximately 86% of ransomware attacks are never publicly reported.

A total of 130 different ransomware groups carried out attacks in 2025.

The Akira ransomware group was linked to 776 total recorded attacks in 2025.

Of the 65 CVEs discussed by the BlackBasta ransomware group, 54 are Known Exploited Vulnerabilities (KEVs).

Australia and the United Kingdom recorded 110 and 42 disclosed ransomware attacks respectively in 2025.

The United States suffered 3,768 undisclosed ransomware incidents in 2025.

The INC ransomware group claimed 66 victims in undisclosed activity in 2025.

The United States accounted for 58% of all recorded disclosed ransomware attacks in 2025.

In 2025, 55% of Chief Information Security Officers (CISOs) in the US and UK reported that their organization experienced a cyberattack, ransomware infection, compromise, or data breach that rendered mobile, remote, or hybrid endpoint devices inoperable.

Half of school IT leaders view ransomware as a serious threat to learning continuity in 2025

Nearly 40% of schools feel underprepared for ransomware in 2025

There was a 264% increased surge of ransomware attacks on healthcare organizations.

29% of global respondents ranked ransomware attacks and privacy breaches as their leading cyber concerns.

66% of IT leaders view AI-generated attacks as the most significant threat to data security, surpassing ransomware at 50%.

72% of IT leaders support a ban on ransomware payments, with 51% strongly supporting it.

The 10 ransomware variants with the highest cumulative payment amounts identified in BSA reports accounted for approximately $1.5 billion in payments.

Between January 2022 and December 2024, FinCEN received 7,395 BSA reports related to 4,194 ransomware incidents, totaling more than $2.1 billion in ransomware payments.