Cybercrime losses and complaints (FBI IC3)

What victims told the FBI they lost to cybercrime each year, and how many complaints it received, from the annual reports of its Internet Crime Complaint Center (IC3). Every figure links to its report.

Cybercrime losses reported to the FBI, 2025–2011 (USD billions)

Losses (bars) Complaints (line)

Ransomware and data-breach complaints from critical-infrastructure sectors, 2024 (number of complaints, not money)

Critical Manufacturing: Ransomware 258, Data breach 71Critical Manufacturing258 / 71Healthcare/Public Health: Ransomware 238, Data breach 206Healthcare/Public Health238 / 206Government Facilities: Ransomware 220, Data breach 180Government Facilities220 / 180Financial Services: Ransomware 190, Data breach 176Financial Services190 / 176Information Technology: Ransomware 138, Data breach 196Information Technology138 / 196Commercial Facilities: Ransomware 111, Data breach 68Commercial Facilities111 / 68Food and Agriculture: Ransomware 81, Data breach 50Food and Agriculture81 / 50Transportation: Ransomware 57, Data breach 62Transportation57 / 62Energy: Ransomware 38, Data breach 23Energy38 / 23Chemical: Ransomware 35, Data breach 22Chemical35 / 22Communication: Ransomware 17, Data breach 27Communication17 / 27Water and Wastewater: Ransomware 11, Data breach 10Water and Wastewater11 / 10Emergency Services: Ransomware 6, Data breach 14Emergency Services6 / 14Defense Industrial Base: Ransomware 3, Data breach 1Defense Industrial Base3 / 1

Ransomware Data breach

About this data

Complaints to the FBI IC3 from organisations in 14 US critical-infrastructure sectors (2024 report, p.12). The 2025 report names the most-hit sectors but gives no counts. Source: FBI IC3 Internet Crime Report 2024.

Ransom received per group (USD millions)

Ransom payments received, as stated by officials. Figures cover different periods and aren't comparable totals.

Akira: approx. USD 244.17 million (as of 2025-09)Akiraapprox. USD 244.17 millionas of 2025-09Conti: more than USD 150 million (as of 2022-01)Contimore than USD 150 millionas of 2022-01LockBit: more than USD 120 million (as of 2024-02)LockBitmore than USD 120 millionas of 2024-02Hive: approx. USD 100 million (as of 2022-11)Hiveapprox. USD 100 millionas of 2022-11LockBit: approx. USD 91 million (US only) (as of 2023-06)LockBitapprox. USD 91 million (US only)as of 2023-06Cuba: USD 60 million (as of 2022-08)CubaUSD 60 millionas of 2022-08
About this data

Each bar is one official statement; bar length uses its leading number only. Quotes and sources are on the Threat groups page.

About this data and sources

What victims told the FBI they lost to cybercrime each year, from the annual reports of its Internet Crime Complaint Center (IC3). It counts every kind of cybercrime, not only data breaches: investment and romance fraud, business email compromise, ransomware and more. Most complaints come from the US. Read it as a floor: many victims never report, and no organisation publishes a worldwide total for breaches alone. 2012 and 2014 are missing because those reports give the total only inside a chart.

Sources