US banks processed over $1 billion in ransomware payments last year

Ransomware
(Image credit: Pixabay)

Banks in the United States processed almost $1.2 billion in ransomware payments last year, a new report has claimed.

The Financial Crimes Enforcement Network (FinCEN) drew on data from the ransomware-related Bank Secrecy Act (BSA) filings throughout 2021, and found such incidents have increased “substantially” year-on-year, with roughly 75% of the reported incidents happening in the second half of the 2021.

Russian actors are to blame for the bulk of these incidents, the report added.

Ransomware rise

Last year, FinCEN received a total of 1,489 ransomware-related filings, collectively worth almost $1.2 billion, which is a 188% increase compared to the year before. In 2020, the organization claims, FinCEN filings totaled $416 million. This doesn’t necessarily have to mean ransomware attacks grew in volume - it can also mean reporting on these incidents improved, the report claims. 

The report also stated that the values of these incidents did not significantly differ month-to-month, during 2021, with the median incident amount for these transactions being $135,000, up slightly from $102,273 for the first half of the year.

“Today’s report reminds us that ransomware—including attacks perpetrated by Russian-linked actors— remain a serious threat to our national and economic security,” said FinCEN Acting Director Himamauli Das. “It also underscores the importance of BSA filings, which allow us to uncover trends and patterns in support of whole-of-government efforts to prevent and combat ransomware attacks.

Usually, ransomware operators would demand payment in bitcoin, monero, or other cryptocurrencies, and not in fiat. The transactions are faster, and cannot be stopped by an intermediary (unless they’re being sent to a third party such as a cryptocurrency exchange). With coin-mixing services such as Tornado Cash (whose developer got arrested earlier this year), hackers can launder the stolen cryptos. 

Researchers have found that state-sponsored actors in Russia and North Korea are using ransomware to fund various state operations. 

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Less than half of ransomware incidents end in payment - but you should still be on your guard
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
More reports claim 2024 was the worst year for ransomware attacks yet
ransomware avast
Ransomware attacks are costing Government offices a month of downtime on average
Representational image of a cybercriminal
Should ransomware payments be illegal?
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Bad news - businesses who pay ransomware attackers aren’t very likely to get their data back
Flags of Iran, China, Russia and North Korea on a wall. China North Korea Iran Russia alliance
Cybercrime is helping fund rogue nations across the world - and it's only going to get worse, Google warns
Latest in Security
ransomware avast
Ransomware attacks are costing Government offices a month of downtime on average
Lock on Laptop Screen
Data breach at Pennsylvania education union potentially exposes 500,000 victims
Data leak
Top collectibles site leaks personal data of nearly a million users
Spyware
Stalkerware data breach potentially hits over 2 million users, including thousands of Apple devices
An American flag flying outside the US Capitol building against a blue sky
Five Eyes "cannot replace US intel in Ukraine", claims former US Cyber Command Chief
Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration.
Criminals are using a virtual hard disk image file to host and distribute dangerous malware
Latest in News
Apple iPhone 16 Pro Max REVIEW
The latest batch of leaked iPhone 17 dummy units appear to show where glass meets metal on the new designs
Hornet swings their weapon in mid air
Hollow Knight: Silksong could potentially launch this year and I reckon it could be a great game for an Xbox handheld
ransomware avast
Ransomware attacks are costing Government offices a month of downtime on average
Cassian looking at someone off-camera from a TIE fighter cockpit in Andor season 2
Star Wars: Andor creator is taking a stance against AI by canceling plans to release its scripts, and I completely get why
Nintendo x Seattle Mariners partnership
The Nintendo Switch 2 logo will be featured on the Seattle Mariners' baseball jerseys this season
Apple iPhone 16 Pro Max Review
Siri's chances to beat ChatGPT just got a whole lot better