83% of ransomware victims paid a ransom, up from 70% previously.

Average ransom payment dropped to $2.8 million, down from $3.6 million in 2025.

Mean recovery cost for identity-related incidents reached $1.64 million, with a median of $750,000, and 73% of affected organizations facing costs of $250,000 or more.

The average cost of downtime for organizations is $15,000 per minute.

The average ransom demand exceeded $1,028,214 in Q1 2026.

Ransomware payouts now average $40 million, nearly triple their level in 2024.

41% of organizations that experienced a cyber incident report financial loss or revenue impact.

In 2025, total ransomware payments fell 23%.

47% report operational shutdown, 41% report data loss, 41% report reputational damage, and 40% report lost revenue as impacts of cyber attacks in the last 12 months.

Organizations with higher cyber maturity experience 50% less financial impact per dollar of revenue when cyber incidents occur.

The financial cost of a cybersecurity incident for AI-first businesses exceeds the cost for non-AI-first businesses by more than 135%.

72% of healthcare organizations experienced a moderate to severe financial impact from cyber incidents in the past two years.