Healthcare continues to pay a significant financial toll for ransomware attacks, the U.S. Treasury Department found.
Here are four things to know from the December report, where the U.S. Treasury Financial Crimes Enforcement Network analyzed Bank Secrecy Act data involving cyberattacks:
1. From January 2022 through December 2024, U.S. companies paid over $2.1 billion to ransomware hackers, of which healthcare accounted for nearly 15%.
2. Financial services, manufacturing and healthcare were the industries most affected by ransomware, both by the number of incidents and aggregate payments.
3. Healthcare had 389 ransomware incidents in that time, trailing only financial services (456) and manufacturing (432) and ahead of legal services (334), or 9.3% of the total.
4. Healthcare organizations paid about $305.4 million to ransomware groups during that period, behind only financial services ($365.6 million) and ahead of manufacturing ($284.6 million), science and technology ($186.7 million), and retail ($181.3 million).
