The fall of two dominant ransomware syndicates, LockBit and AlphV, created a power vacuum in the cybercriminal landscape. New actors emerged, leading to increased attack volume and unpredictability. Ransomware victims reached 6,046 in 2025, with the US being the most targeted. Manufacturing, professional services, and healthcare were the top affected industries. Average ransom demands rose, but fewer victims paid. Ransomware became the primary attack vector in third-party breaches.