21% of ransomware incidents involved installing backdoors for persistence.

41% of successful ransomware attacks resulted in reputational harm.

16% of successful ransomware attacks involved payment pressure tactics threatening employees.

37% of organisations affected twice or more by ransomware paid the attackers.

32% of ransomware victims paid the attackers to recover or restore data.

50% of law firms cited phishing as the top cybersecurity concern, a new category this year, surpassing ransomware and user behavior.

59% of ransomware non-victims had implemented an email security solution.

67% of organisations in healthcare were affected by ransomware.

41% of those who paid a ransom failed to recover all their data.

31% of ransomware victims were affected multiple times in the last 12 months.

Just under a quarter (24%) of the ransomware incidents experienced by respondents involved data encryption.

57% of the organisations surveyed were affected by ransomware.

Fewer than half (47%) of ransomware victims had implemented an email security solution.

Ransomware attackers have a one-in-three chance of payout.

22% of successful ransomware attacks involved payment pressure tactics threatening partners, shareholders, and customers.

25% of successful ransomware attacks led to a loss of new business opportunities.

65% of organisations in local government were affected by ransomware.

The U.S. was the top ransomware target, accounting for 53% of all ransomware incidents, in H1 2025.

The United States accounted for over half of all ransomware victims in H1 2025.

Ransomware rose 36% year over year.