25.6% of government sector threats were attributed to RansomHub in 2024.

10% of organizations in the government sector experienced ransomware incidents annually.

13.4% of IT and security decision-makers indicated third-party/supply chain compromise as a common entry point for attackers.

70% of organizations reported that they paid the ransom in 2023

The percentage of organizations that never paid a ransom increased from 9% last year to 30% this year

Unnamed Fortune 50 company reported a ransom payment of $75 million

42.22% of finance organizations reported limited visibility into their entire environment.

33.3% of government sector threats were attributed to LockBit in 2024.

4.83% of organizations reported average downtime of one week after a cyber incident.

23.26% of organizations reported average downtime of 11-24 hours after a cyber incident.

5.53% of ransomware incidents involved a ransom demand as the detected phase.

37.50% of agriculture organizations reported limited visibility into their entire environment.

23.08% of government organizations reported limited visibility into their entire environment.

55% of organizations reported experiencing 11 or more hours of downtime on average after a cyber incident.

2.33% of organizations reported average downtime of more than a week after a cyber incident.

On average, organizations take just over 2 weeks to respond to and contain a security alert from initial detection to resolution.

In August 2024, the Rhysida ransomware group attacked the Port of Seattle, causing systems to be offline for more than three weeks.

At least 165 Snowflake customers were affected by the 2024 Snowflake data breach, including major technology organizations like Pure Storage and AT&T

59% of organizations in France expressed the highest level of concern regarding risks, while 36.8% in the UAE exhibited the lowest level of concern.

23.1% of government sector threats were attributed to Volt Typhoon in 2024.