Skip to main content

Cybersecurity statistics / Benchmarks

What share of organisations experienced a ransomware attack?

4 published sources answer this. They report between 24% and 78%, with a median of 67%. The figures differ because the surveys cover different organisations and define the question in slightly different ways, so the spread matters as much as the middle.

Last updated 2026-07-25. 4 publishers, reporting between 2025-10-01 and 2026-04-28. Every figure below was checked by hand against its source.

0%25%50%75%100%Median 67%Oct 2025Jan 2026Apr 202678% 78% of organizations experienced a ransomware attack in the preceding 12 months (CROWDSTRIKE)CROWDSTRIKE 78%70% 70% of organizations experienced ransomware incidents in the last year (ExtraHop)ExtraHop 70%64% 64% of organizations experienced a ransomware attack in the past year. (CyberEdge Group)CyberEdge Group 64%24% In 2025, 24% of organizations reported being the victim of a ransomware attack (vs 18.6% reported in 2024). (Hornetsecurity)Hornetsecurity 24%
One sourceFull range 24%–78%Middle halfMedian 67%Trend, indicative
Dots are placed by figure and report date. Hover one for the full statistic; click it to open the report. The trend line is fitted across 4 reports over about 7 months, too short a window to be more than indicative.

What each source reports

FigureSourcePublished
24%In 2025, 24% of organizations reported being the victim of a ransomware attack (vs 18.6% reported in 2024).2025-10-01
64%64% of organizations experienced a ransomware attack in the past year.2026-04-28
70%70% of organizations experienced ransomware incidents in the last year2025-10-13
78%78% of organizations experienced a ransomware attack in the preceding 12 months2025-10-21

How this page is put together

Candidate figures are gathered automatically from the database each week, then each one is read and either accepted or rejected before it appears here. A figure is rejected when it answers a different question, for example a single sector or country, a consequence of an attack, or a rate among victims rather than among all organisations.

Only one figure per publisher is used, the most recent. Cite the original publisher rather than this page: every source is linked above.

Other benchmarks

What share of ransomware victims paid the ransom?
What share of organisations experienced a phishing attack?
What share of organisations have deployed multi-factor authentication?
What share of organisations run security awareness training?

Get new figures as they publish

This page is updated as new reports answer the same question. The weekly email carries the newest figures.

Get the newsletterSearch the database