The last few months have shown indications that the ransomware landscape may be shifting. The first is a change in tactics from threat actors, who are increasingly moving away from encrypting data to exfiltrating it. Concurrently, there are signs that victim organisations are becoming less likely to pay ransoms. 

https://www.marsh.com/uk/services/cyber-risk/insights/ransomware-landscape-appears-to-be-shifting.html