Ransomware profits drop as victims stop paying hackers

Coveware's Q3 2025 report shows ransom payments at an all-time low (23%) even as 76% of observed incidents involved data exfiltration and double extortion; average and median ransoms fell to $377,000 and $140,000 respectively. The analysis notes attackers such as Akira and Qilin concentrating on medium-sized firms, increasing use of remote access compromise and software vulnerabilities as initial access vectors, and a shift toward precision targeting and insider recruitment as profits decline.