Study: Fewer Businesses Are Making Ransomware Payments

Both the average ransom payment and median payment declined substantially in Q3 2025.
Nicole Mousicos
Written By
Updated on November 11, 2025
Woman on laptop next to electronics panel

According to a recent cybersecurity report, ransomware payment rates hit a historic low across several areas in Q3 2025.

This correlates closely with current industry trends, as larger firms increasingly resist the pressure to pay ransoms, and smaller firms face decreasing overall ransomware payment rates.

The report’s findings also suggest that businesses are becoming better equipped to deal with cybersecurity threats, but firms should still exercise vigilance, especially as new threats like AI develop.

A report from Coveware has found that both the average ransom payment and the median ransom payment is down significantly from Q2 to Q3 2025, with the former down 66% and the latter down 65%.

Likewise, ransom payment rates across all impact scenarios, including encryption, data exfiltration, and other extortion, fell to a historic low of 23%.

About Tech.co Video Thumbnail Showing Lead Writer Conor Cawley Smiling Next to Tech.co Logo

This just in! View the top business tech deals for 2026 👨‍💻

Ultimately, the report concluded that the overall success rate of cyber extortion is decreasing, based on a few factors.

The report identified two wider trends these numbers reflect.

On the one hand, larger businesses are getting better at resisting the pressure to pay ransoms and are beginning to understand that paying for stolen data holds no benefit to them in the long run. Instead, approaching negotiations with a no-payment offer is becoming more advisable.

Secondly, attacks on smaller firms are seeing relatively lesser amounts offered as ransom payments. While small businesses do remain easier to disrupt overall, attackers are asking for less money in return.

The historic low for both average ransomware payments and median ransomware payments comes after a long-term downward trend, suggesting that payments are generally decreasing.

While businesses should always remain vigilant and focus on keeping their data as secure as possible — particularly in the age of AI and data breaches — the report can be seen as a positive one, that perhaps progress is being made. 

It appears that firms are getting better at understanding what needs to be done in order to stay protected. That being said, businesses should still keep one eye on the future and never get to a point of complacency.

Written By

Nicole Mousicos

Nicole is Tech.co’s News Editor, reporting on the latest technology news and curating The AI Strat newsletter. After studying English Literature and Creative Writing, they worked on local newspapers and online publications, including Outlander Magazine. Previously, they covered tech products and news at Expert Reviews. Outside of Tech.co, they enjoy sports and video games.

More about

Popular topics