Less than half of ransomware incidents end in payment - but you should still be on your guard

A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
(Image credit: Getty Images)

  • The amount of money paid to ransomware attacks declined in 2024, report claims
  • A total of $813.55 million was paid, compared to over $1.2 billion in 2023
  • Even those who pay the ransom are unlikely to get their data back in full

Anyone working in security will be all too familiar with the increasing dangers of ransomware and its disastrous consequences, but new research from Chainalysis has claimed 2024 actually saw a 35% decrease year-on-year in the number of firms who paid the ransom.  

Ransomware attacks reportedly hit a new high in 2024, but the revenue ransomware attackers received declined for the first time since 2022. That being said, the numbers are still quite eyewatering.

Between January and June of 2024, Chainalysis reported a $459.8 million victim loss to ransom payments, which was actually 2.38% higher than the same period in 2023. This slowed in the period following though, and 2024’s total came to $813.55 million, compared to 2023’s staggering $1.25 billion.

New ransom guidelines

There are a few likely reasons for this. As cybersecurity teams develop their tactics and adapt to threats, alternatives to blindly paying ransoms have developed. For example, the UK government has launched proposals for ransomware protection which includes a ban on ransom payments for public services, aimed at dissuading criminals and disrupting the attackers income source.

Research has shown that those who pay the ransom aren’t even particularly likely to get their data back, with only roughly 7% actually fully recovering their information, which will undoubtedly factor into the incident response for a lot of organizations.

“According to our data, around 30% of negotiations actually lead to payments or the victims deciding to pay the ransoms. Generally, these decisions are made based on the perceived value of data that’s specifically been compromised,” commented Dan Saunders, Director of Incident Response at Kivu Consulting.

Of course, as more firms experience this, and as more security teams develop their tactics against cyberattacks, the defences against ransomware will improve. Cybersecurity and cyberattacks are both constantly evolving, so the future is unpredictable.

“For years now, the cybersecurity landscape seemed hurtling towards a so-called ransomware apocalypse" notes Jacqueline Burns Koven, Head of Cyber Threat Intelligence at Chainalysis, "so this sharp decline, to levels even lower than those in 2020 and 2021 speaks to the effectiveness of law enforcement actions, improved international collaboration, and a growing refusal by victims to cave into attackers demands."

You might also like

Ellen Jennings-Trace
Staff Writer

Ellen has been writing for almost four years, with a focus on post-COVID policy whilst studying for BA Politics and International Relations at the University of Cardiff, followed by an MA in Political Communication. Before joining TechRadar Pro as a Junior Writer, she worked for Future Publishing’s MVC content team, working with merchants and retailers to upload content.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Read more
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
More reports claim 2024 was the worst year for ransomware attacks yet
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Bad news - businesses who pay ransomware attackers aren’t very likely to get their data back
A computer being guarded by cybersecurity.
The impact of the cyber insurance industry in resilience against ransomware
Ransomware attack on a computer
Ransomware attacks surged in 2024 as hackers looked to strike faster than ever
Representational image of a cybercriminal
Should ransomware payments be illegal?
Hands typing on a keyboard surrounded by security icons
35 years on: The history and evolution of ransomware
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
Monster Hunter Wilds
Monster Hunter Wilds Title Update 1 launches in early April, adding new monsters and some of the best-looking armor sets I need to add to my collection
Zotac Gaming RTX 5090 Graphics Card
Nvidia Blackwell stock woes are compounded by price hikes as more RTX 5090 GPUs soar in pricing, and I’m sick and tired of it all at this point
A collage of Elizabeth Olsen's Scarlet Witch and Tatiana Maslany's She-Hulk
Marvel fans are already tired of Doomsday and Secret Wars cast gossip as two more superheroes get linked with roles in the next two Avengers movies
Four operators survey Verdansk. One holds a sniper rifle, one binoculars, another holds is landing with their parachute, while the last wears a skull mask
New Call of Duty: Warzone trailer shows a beautiful rebuilt Verdansk, but some fans want more: 'it won't be the same unfortunately'
An Apple Music pink/pixellated poster advertising DJ with Apple Music
DJ with Apple Music lands, allowing subscribers to build and mix DJ sets directly from its +100 million-song catalog
The Meta Quest 3 and controllers on their charging station which is itself on a wooden desk next to a lamp
Forget Android XR, I've got my eyes on Vivo's new Meta Quest 3 competitor as it could be the most important VR headset of 2025