FinCEN Ransomware Trends (2022-2024)

Financial Crimes Enforcement Network (FinCEN) pdf 2025-12-01T00:00:00

Abstract

This FTA provides threat pattern and trend information regarding ransomware incidents based on BSA data filed with FinCEN between 1 January 2022 and 1 February 2025 reporting ransomware-related incidents that occurred between 1 January 2022 and 31 December 2024 (the review period). During the three year review period, FinCEN received 7,395 BSA reports related to 4,194 ransomware incidents totaling more than $2.1 billion in ransomware payments. During the previous nine year period from 2013 through the end of 2021 FinCEN received 3,075 BSA reports totaling approximately $2.4 billion in ransomware payments. Ransomware incidents and payments reached an all-time high in 2023 at 1,512 incidents, totaling approximately $1.1 billion in payments an increase of 77 percent in total payments year-over-year from 2022 to 2023. In 2024, incidents decreased slightly to 1,476 while total payments were approximately $734 million. Overall, the trend in the number of incidents and payments varied throughout the review period.

Loading executive summary...
Loading full markdown...

Your browser does not support inline PDF viewing.

Download the PDF to view it.

Match Rate: 9.00/10 (Relevance to core cybersecurity goals)

LINK COPIED TO CLIPBOARD