Ransomware Tracker [2022]

Ransomware Basics

According to Cybersecurity and Infrastructure Agency, Ransomware is an ever-evolving form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption. Ransomware actors often target and threaten to sell or leak exfiltrated data or authentication information if the ransom is not paid.

In recent years, ransomware incidents have become increasingly prevalent among the Nation’s state, local, tribal, and territorial (SLTT) government entities and critical infrastructure organizations.

2021 Statistics:

• Ransomware frequency was 11 seconds
• 37% of all businesses were hit by an attack
• 57% of victims managed to recover their data from a backup
• 32% of companies hit by ransomware paid ransom
• $570,000 is the average ransom
• $50M is the highest ransom demand
• $1.85M is the average cost of recovery after the attack

Ransomware Tracker

Submit a Ransomware Attack

We encourage information sharing. If you have a ransomware attack to report, please first contact the Federal Bureau of Investigations then use this anonymous form to submit your ransomware for consideration in our tracker.

Your Name

Your Email

Name of organization hit by ransomware

Date of attack

Type of organizationHealth CareGovernmentEducationalManufacturingRetailTechnologyFinancialOther

Type of ransomware

Reference URL

I have reviewed and accept the Privacy Policy and Terms of Use