Threat actors are diversifying their entry points, leading to 26% of ransomware incidents involving compromised endpoints.

Only 13% of ransomware victims paid the ransom in 2025, which is a decrease from 16.3% in 2024.

42% of security leaders admit that the training provided is still inadequate or too superficial.

77% of respondents view AI-driven phishing as a serious and emerging threat, up from 66.9 % in 2024.

In 2025, 24% of organizations reported being the victim of a ransomware attack (vs 18.6% reported in 2024).

46% of organizations report having ransomware insurance in 2025, a decrease from 54.6% in 2024.

62% of organizations now use immutable backups.

Ransomware remained the most impactful cybercrime tool despite a reported decrease of 11% compared to the previous ENISA Threat Landscape (ETL) report.

61% believe that AI has significantly increased the overall risk of ransomware attacks.

Phishing and email-based attacks dropped to 46% of all incidents in 2025, down from 52.3% in 2024.

Stolen credentials were involved in approximately 25% of ransomware attacks in 2025, up from an estimated 20% in 2024.

82% of organizations have implemented a Disaster Recovery (DR) Plan.

Exploited vulnerabilities also contributed to 12% of attacks in 2025.

74% of organizations report providing employee training to prevent ransomware, though this figure is a drop from 81.3 % in 2024.

Average initial ransom demand (based on all cases with ransom demand) in 2019: $7.77 million.

Between 2019 and 2023, other sectors experienced large losses primarily from ransomware (53.1%), followed by data breaches (25.0%) and other causes (21.9%).

Between 2019 and 2023, healthcare experienced large losses primarily from ransomware (57.1%), followed by data breaches (28.6%) and other causes (14.3%).

The average duration business operations were affected by ransomware in financial services was 33 days.

The average duration business operations were affected by ransomware in manufacturing was 62 days.

Average initial ransom demand (based on all cases with ransom demand) in 2021: $17.39 million.