The U.S. Department of Homeland Security’s (DHS) Cyber Crimes Center has successfully prevented hundreds of ransomware attacks and confiscated billions in cryptocurrency since its establishment in 2021.
Over 500 Cyber Attacks Stopped Since 2021
The Homeland Security Investigations (HSI) unit revealed it has stopped 537 ransomware attacks since 2021, targeting cybercriminals before they could inflict damage. The agency has also seized $4.3 billion in cryptocurrency from hackers through these interventions.
According to Mike Prado, the deputy assistant director of HSI’s Cyber Crimes Center, the most common targets were U.S. government agencies, which accounted for 21% of thwarted attacks—more than any other sector.
Proactive Cybercrime Prevention
Prado emphasized HSI’s proactive strategy to disrupt ransomware attacks by closely monitoring cybercriminal activities and evolving attack methods. Agents scan internet traffic for suspicious patterns, track software vulnerabilities, and watch for potential threats from ransomware groups aiming to exploit security gaps.
“Our goal is to detect these attacks early, sometimes even before they happen,” Prado explained. By staying one step ahead, HSI can prevent breaches and minimize damage.
The agency is closely monitoring several international cybercrime groups constantly seeking ways to acquire cryptocurrency. However, Prado noted the challenge of building legal cases against hackers whose plots are stopped before they unfold.
When HSI identifies an imminent threat, it promptly alerts government agencies, businesses, and other potential targets, warning them of possible ransomware attacks. The agency also collaborates with over 235 field offices across the United States, as well as local law enforcement and other federal agencies, to enhance its response efforts.
Rise in Ransomware Attacks
Despite the success of HSI’s operations, ransomware remains a growing concern. A recent report from blockchain analytics firm Chainalysis highlighted a 2% increase in ransomware-related cryptocurrency transactions in 2024, totaling $459.8 million, up from $449.1 million the previous year. By the end of 2023, the total amount paid out in crypto ransomware reached $1 billion.
Additionally, the maximum ransom payment in 2024 rose sharply—up 96% from 2023 and a staggering 335% from 2022. Chainalysis attributes this increase to cybercriminals demanding larger payouts from victims. The median ransom amount surged from less than $200,000 in early 2023 to $1.5 million by mid-2024.
In July 2024, the most significant ransomware payout ever recorded occurred when the group Dark Angels received $75 million from a single victim.
