Overview
- Victim payments fell to about $734 million in 2024 from roughly $1.1 billion in 2023, while reported incidents edged down to 1,476 from 1,512.
- From January 2022 through December 2024, filings recorded 4,194 incidents and more than $2.1 billion paid, bringing the 2013–2024 total near $4.5 billion.
- FinCEN identified 267 ransomware variants, with the top 10 responsible for about $1.5 billion; ALPHV/BlackCat led by revenue and Akira by incident count.
- Manufacturing, financial services, and healthcare were most targeted, with financial services incurring the largest losses by dollars.
- Bitcoin accounted for 97% of ransom payments and TOR was used in 67% of communications, while the 2024 median payment was about $155,000.