2025 State of Ransomware

Inside a record-breaking year of ransomware attacks

As ransomware groups grow more unpredictable and decentralized, organizations need more than just tools— they need complete visibility.

This year’s report uncovers how attackers are evading detection with stealthier tactics and how to protect your business from the latest threats.

By submitting this form, I consent to ThreatDown or an authorized partner contacting me regarding products and services and using my personal data as described in the ThreatDown’s Privacy Policy.

countries reported their first attack in 12 months

surge in reported ransomware attacks

new ransomware groups emerged

What You’ll Learn

  • How ransomware gangs are adapting to improve defenses.
  • The stealth tactics that dominate attacks.
  • The critical weakness of under-protected devices.
  • How to protect your organization from the latest threats.

The Ransomware Ecosystem

Between July 2024 and June 2025, ransomware attacks surged 25% year-over-year.  Fueled by an influx of new groups, ransomware spread to 42 previously untouched countries, compromised millions of people’s data, cost billions of dollars in damages, and endangered people’s lives. With over 1,000 attacks in February alone, ransomware has never been more widespread, or more dangerous. 

The 2025 State of Ransomware explores how attackers are evading detection with stealthier tactics by exploiting blind spots, shadow IT, and under-protected systems that provide cover for intrusions.

Get the report today