Ransomware Profits Plummet: Why Victims Are Refusing to Pay Hackers in 2025

Cyber criminals are losing their grip, and honestly, that’s a big change. For years, fear and extortion ruled the digital world, but now more companies are saying no to ransomware demands and keeping their wallets closed. It’s not just a blip, either. This is a real turning point, and hackers are starting to feel the heat.

Is it really a win for everyone that victims are not paying ransom?

But is this a clear win for everyone? That’s where things get interesting. If fewer people pay up, does that mean we’re finally winning? Or are we just pushing criminals to get nastier? Let’s dig into why fewer victims are paying ransom and what that could mean for cybersecurity down the road.

The latest numbers show a sharp drop in companies willing to pay hackers after getting hit. Only 23% of ransomware victims are forking over the cash, now a record low. This trend has been steady for most ransomware attacks over the last six years, with just a few outliers. To paint a picture, ransomware is basically digital hostage-taking: hackers lock up your files and demand money to unlock them.

Back at the start of 2024, about 28% of companies were still paying up. Fast-forward to the third quarter of 2025, and that number hit rock bottom. It’s like watching a schoolyard bully lose his power as people finally stand up to him. But hold on, this shift could have far-reaching consequences.

So what’s behind this change? Experts point to stronger defenses. Companies are getting serious about cybersecurity, installing better firewalls, backing up their data, and actually training employees to spot scams. Law enforcement and legal teams are also telling victims to stop paying and putting more pressure on hackers. Coveware, a big name in cybersecurity, says this is proof that everyone’s efforts are paying off. Every time a victim refuses to pay, it bleeds the attackers dry. It’s like cutting off their oxygen. All these moves, blocking breaches, minimizing damage, and handling extortion smarter, are slowly choking off the criminal world. But there’s more to the story.

How Ransomware Tactics Have Evolved

Ransomware itself has changed. Hackers don’t just encrypt files anymore; now they steal sensitive data and threaten to leak it. So even if your files are safe, your secrets aren’t. Imagine it: they lock your stuff, and on top of that, they grab customer info or trade secrets and dangle them over your head, threatening to spill everything if you don’t pay.

Coveware reports that by the third quarter of 2025, over 76% of ransomware attacks involved data theft. For most groups, that’s the main goal now. And when hackers skip file-locking and just steal data, victims pay even less; only 19% give in.

This shift shows big companies getting smarter. Instead of paying ransoms, they’re investing in stronger defenses, hiring cybersecurity pros, upgrading systems, and using AI to spot threats. It’s a smarter move than feeding the criminals.

But hackers aren’t giving up. Some, like Akira and Chelene, are changing tactics. These groups were behind 44% of all tracked attacks in the third quarter of 2025, and they’re now focusing on medium-sized businesses. These companies often have weaker defenses and are more likely to pay, so it’s like predators moving to prey when the big ones fight back.

Another big trend: hackers are using remote access and software flaws to break in. Think of it as sneaking through a side door because someone forgot to lock it. Remote work setups and outdated software are easy targets. Coveware thinks that as hackers make less money, they’ll get more precise, maybe going after big companies again once the smaller targets dry up.

And as big companies lock things down, hackers are likely to rely more on social engineering, tricking employees into handing over passwords or even bribing insiders. There have already been cases where hackers offered money to journalists or staff at major media companies, proving that people are often the weakest link.

But here’s the tough question: Is refusing to pay always the right move? Some say it’s the only way to beat the criminals. Others worry that hackers will just leak the data anyway, wrecking reputations and hurting innocent customers. There’s also debate over whether governments should do more to hunt down stolen funds or if companies that get breached should be held accountable for weak security.

Frequently Asked Questions (FAQs)