Ransomware payments plummeted by over one-third in 2024 as a growing number of organizations chose to defy cybercriminal extortion attempts. Data released this week reveals a significant shift in the cyber threat landscape, marking the first decline in ransom payouts since 2022.
The Financial Shift: From $1.25 Billion to $814 Million
According to a new report from crypto forensics firm Chainalysis, the total amount extorted by ransomware gangs dropped to $814 million in 2024. This represents a 35% decrease compared to the record-breaking $1.25 billion captured by hackers in 2023.
This decline is particularly striking because it occurred despite an increase in the number of victims listed on various ransomware leak sites. The discrepancy suggests that while the volume of attacks remained high, the efficacy of these campaigns—measured by successful monetary extraction—has weakened significantly.
Growing Resistance: The Gap Between Demand and Payment
Evidence of a hardening stance against cyber extortion is found in the widening gap between what hackers demand and what they actually receive. During the second half of 2024, ransom demands were 53% higher than the final payouts secured by threat actors.
This trend indicates that victims are increasingly prioritizing data recovery and security hardening over negotiation. By refusing to meet attacker demands, organizations are effectively undermining the business model of these criminal enterprises.
Law Enforcement Success and Operational Disruption
The downturn in criminal profits is also attributed to aggressive international law enforcement efforts. Strategic operations, most notably the high-profile disruption of the prolific LockBit ransomware gang, have hindered the operational capabilities of major cybercrime syndicates.
Improved global intelligence sharing and coordinated infrastructure takedowns have created a more hostile environment for ransomware operators, forcing them to contend with both a more resilient victim base and intensified pressure from authorities.