More than $2 billion in payments from 4,000 ransomware incidents reported to Treasury in recent years

FinCEN’s analysis of 4,194 ransomware incidents from 2022–2024 found companies paid roughly $2.1B to ransomware gangs, with 2023 representing a peak in both payments (~$1.1B) and median ransom size; the report names prevalent groups (ALPHV/BlackCat, LockBit, Akira, Black Basta, Phobos), highlights targeting of financial services, manufacturing and healthcare, notes Bitcoin as the primary payment method and use of unregulated exchanges for laundering, and observes declines in incidents after law-enforcement takedowns in 2024.