Ransomware Statistics
US victims filed 3,611 ransomware complaints with the FBI's IC3 in 2025, reporting $32,320,105 in losses — a total the FBI itself describes as artificially low.
Last reviewed: 20 July 2026
This page sets out official ransomware figures published by the FBI's Internet Crime Complaint Center (IC3) in its 2025 Annual Report. Ransomware is malicious software that blocks access to a computer system until money is paid, and it remains among the highest reported cyber threats targeting critical infrastructure organisations. In 2025, IC3 received 3,611 ransomware complaints reporting $32,320,105 in adjusted losses.\n\nThe FBI is unusually candid that this loss figure understates the damage. IC3 states that ransomware adjusted losses do not normally include estimates of lost business, time, wages, files or equipment, or any third-party remediation services acquired by an entity; that in some cases entities do not report any loss amount at all, creating an artificially low overall ransomware loss rate; and that the number only represents what entities report through IC3 and does not account for entities reporting directly to FBI field offices. All amounts are U.S. dollars and reflect voluntary reports from complainants, most of them in the United States.
Key figures
3,611 complaints
Ransomware complaints received by IC3 in 2025
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report (2025)
$32,320,105 in adjusted losses
Ransomware losses reported to IC3 in 2025
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report (2025)
3,156 complaints in 2024 and 2,825 complaints in 2023
Ransomware complaints in the two prior years, for comparison
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report, three-year comparison (2024)
$12,473,156 in 2024 and $59,641,384 in 2023
Ransomware losses in the two prior years, for comparison
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report, three-year comparison (2024)
56.8% of the total number of ransomware incidents reported
Share of reported ransomware incidents attributed to the top 10 variants in 2025
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report (2025)
Over $16 million, almost half (49.8%) of the total losses reported
Losses attributed to the top 10 ransomware variants in 2025
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report (2025)
63 new ransomware variants, an average of 5.25 new variants per month
New ransomware variants identified via IC3 in 2025
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report (2025)
More than 1,400 complaints, led by legal services (18%) and contracting services (17%)
Ransomware complaints from businesses outside the 16 critical infrastructure sectors in 2025
Source: FBI Internet Crime Complaint Center — 2025 IC3 Annual Report (2025)
Key takeaways
- The headline loss total is a floor, not a ceiling. The FBI says its ransomware figure excludes lost business, wages, files, equipment and remediation costs, and that some victims report no loss amount at all.
- Complaint volumes have risen three years running — 2,825 in 2023, 3,156 in 2024 and 3,611 in 2025 — even though reported dollar losses have moved erratically.
- Ten variants do most of the damage. Akira, Qilin, INC./Lynx/Sinobi, BianLian, Play, Ransomhub, Lockbit, Dragonforce, SAFEPAY and Medusa accounted for 56.8% of reported incidents in 2025.
- Small firms are squarely in scope. More than 1,400 ransomware complaints came from businesses outside the critical infrastructure sectors, most often law firms, contractors and engineering practices.
- The FBI's first recommendation is offline backups: create off-site or offline backups, keep them encrypted and immutable, and test restoration regularly. Multi-factor authentication and prompt patching follow close behind.
Frequently asked questions
How much did ransomware cost victims in 2025?
Victims reported $32,320,105 in ransomware losses to the FBI's IC3 in 2025 across 3,611 complaints. The FBI cautions that the figure is artificially low: it excludes lost business, time, wages, files, equipment and third-party remediation services, some entities report no loss amount at all, and it does not count organisations that report directly to FBI field offices rather than through IC3. For context, reported ransomware losses were $12,473,156 in 2024 and $59,641,384 in 2023.
Which ransomware variants were most reported in 2025?
IC3's ten most frequently reported variants in 2025 were Akira, Qilin, INC./Lynx/Sinobi, BianLian, Play, Ransomhub, Lockbit, Dragonforce, SAFEPAY and Medusa. Together they accounted for 56.8% of all ransomware incidents reported to the FBI and over $16 million in losses, almost half (49.8%) of the reported total. They most impacted critical manufacturing, healthcare and public health, and government facilities. IC3 also identified 63 new variants during the year, averaging 5.25 per month.