As of the second quarter of 2022, the average length of interruption after ransomware attacks at businesses and organizations in the United States was 24 days. This was less than the downtime duration in previous quarter, 26 days. Overall, between the first quarter of 2020 and the fourth quarter of 2021, the average duration of the downtime after a ransomware attack had increased from 15 to 24 days.

From January to October 2023, the average downtime in U.S. healthcare organizations caused by ransomware attacks was 18.71 days. This figure represents an increase from nearly 16 days in 2022 and approximately seven days in 2021.

In 2024, 0.14 percent of the total cryptocurrency transaction volume was identified as illicit. This figure is based on the transactions involving cryptocurrency addresses known to be controlled by ransomware actors. The highest reported share of illegal transactions between 2017 and 2022 was in 2019, 1.9 percent.