RansomwareClock.org
Reported Cost of Ransomware Attacks 2025 YTD
$
Aggregated Estimate from Public and Private Sources, Reflects Reported Attacks Only. Actual cost estimated to be significantly higher.
Cyber Stats
$1.85m
93%
11 seconds
207 days
days is the average time to identify a breach. Meaning the bad guys are in your system for over 6-months. IBM Security Cost of a Data Breach Report 2020.
Only 21%
21 days
Spotlight
RECENT ATTACKS & NEWS
April 25, 2026
China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks
Read More
April 24, 2026
Pre-Stuxnet Sabotage Malware ‘Fast16’ Linked to US-Iran Cyber Tensions
Read More
April 24, 2026
In Other News: Unauthorized Mythos Access, Plankey CISA Nomination Ends, New Display Security Device
Read More
April 24, 2026
Why Cybersecurity Must Rethink Defense in the Age of Autonomous Agents
Read More
April 24, 2026
Locked Shields 2026: 41 Nations Strengthen Cyber Resilience in World’s Biggest Exercise
Read More
April 24, 2026
US Federal Agency’s Cisco Firewall Infected With ‘Firestarter’ Backdoor
Read More
April 24, 2026
Trump Administration Vows Crackdown on Chinese Companies ‘Exploiting’ AI Models Made in US
Read More
April 24, 2026
Vulnerabilities Patched in CrowdStrike, Tenable Products
Read More
April 24, 2026
Bitwarden NPM Package Hit in Supply Chain Attack
Read More
April 24, 2026
Copperhelm Raises $7 Million for Agentic Cloud Security Platform
Read More
PREVENTATIVE RESOURCES
Governmental and Law Enforcement
Legal Matters
Insurance Resources
In Case of Cyber Attack Emergency
If a ransomware incident occurs at your organization, CISA, FBI, and NSA recommend the following actions:
- Follow the Ransomware Response Checklist on p. 11 of the CISA-Multi-State Information Sharing and Analysis Center (MS-ISAC) Joint Ransomware Guide
- Scan your backups. If possible, scan your backup data with an antivirus program to check that it is free of malware.
- Report incidents immediately to CISA at https://us-cert.cisa.gov/report, a local FBI Field Office, or U.S. Secret Service Field Office
- Apply incident response best practices found in the joint advisory from Australia, Canada, New Zealand, the United Kingdom, and the United States on Technical Approaches to Uncovering and Remediating Malicious Activity.
Contact your Local FBI Office - https://www.fbi.gov/contact-us/field-offices
Report a Complaint to the FBI’s Internet Criminal Complaint Center: www.IC3.gov
Technical Expertise/Crisis Communications