FinCEN Ransomware Trends (2022-2024)
Abstract
This FTA provides threat pattern and trend information regarding ransomware incidents based on BSA data filed with FinCEN between 1 January 2022 and 1 February 2025 reporting ransomware-related incidents that occurred between 1 January 2022 and 31 December 2024 (the review period). During the three year review period, FinCEN received 7,395 BSA reports related to 4,194 ransomware incidents totaling more than $2.1 billion in ransomware payments. During the previous nine year period from 2013 through the end of 2021 FinCEN received 3,075 BSA reports totaling approximately $2.4 billion in ransomware payments. Ransomware incidents and payments reached an all-time high in 2023 at 1,512 incidents, totaling approximately $1.1 billion in payments an increase of 77 percent in total payments year-over-year from 2022 to 2023. In 2024, incidents decreased slightly to 1,476 while total payments were approximately $734 million. Overall, the trend in the number of incidents and payments varied throughout the review period.