Ransomware attackers have a one-in-three chance of payout.

41% of those who paid a ransom failed to recover all their data.

32% of ransomware victims paid the attackers to recover or restore data.

Just 17% of UK organisations paid the ransom following a ransomware attack.

63% of organisations opted not to pay ransom demands last year, compared to 59% the year prior.

More than a third (34%) of UK business leaders who support a proposed ransom payment ban believe it would lead to increased government support and intervention to safeguard cyber resilience.

99% of UK business leaders support limiting ransom payments for private organisations.

94% of UK business leaders support limiting ransom payments for public entities.

A third (33%) of UK business leaders believe that a ban would decrease the prevalence of ransomware attacks by reducing the incentive for attackers.

In real-world situations within the private sector, if a ransom payment ban were to take hold, only 10% of UK business leaders said they would comply if they were attacked.

96% of surveyed UK business leaders from companies with revenues of £100 million+ believe that ransomware payments should be banned across both public and private sectors.

Almost all UK respondents (98%) stated that cyber readiness and recovery will be a top spending priority.

75% of UK business leaders who believe ransomware payments should be banned admit they would still pay a ransom if it were the only way to save their organisation, even if a ban was extended to the private sector and civil or criminal penalties applied.

In real-world situations within the private sector, if a ransom payment ban were to take hold, 15% of UK business leaders said they would be neither likely nor unlikely to comply with such a ban.

Yearly data from 2024 shows that while ransomware attacks and the number of active gangs have grown, ransom payments saw a significant drop

In 71% of cases where companies paid a smaller ransom than the initial demand, negotiation played a role, either directly or with third-party assistance.

The median ransom payment dropped by 50% from $2 million in 2024 to $1 million in 2025.

Organisations with $250 million revenue or less saw median ransom demands of less than $350,000.

The median ransom demand decreased by a third between 2024 and 2025.

The median ransom payment was $1 million.