The End of Ransomware? Report Claims the Number of Firms Paying up Is Plummeting

Why It Matters

The falling payout rates erode ransomware profitability, prompting attackers to rethink tactics and potentially lowering overall threat exposure, while influencing cyber‑insurance pricing and corporate security investments.

Summary

Coveware’s Q3 2025 report shows the ransom‑payment rate fell to a record low of 23 % of all ransomware victims, down sharply from previous quarters. The average ransom dropped 66 % to $376,941 and the median to $140,000, while data‑exfiltration‑only attacks saw only 19 % of victims pay. The decline reflects stronger defenses, backup strategies and law‑enforcement efforts, as well as a shift by attackers toward cheaper data‑only extortion. Coveware says the shrinking success rate signals a broader contraction in cyber‑extortion effectiveness.