VPNs alone accounted for two-thirds (66%) of all ransomware attacks.

Ransomware gangs claimed responsibility for targeting 5,336 victims in 2023.

The average ransom demand was $957K, and the average ransom paid was $317K. This means the price was often negotiated down by more than half.

The industries most heavily impacted by ransomware in Q1 2025 were manufacturing, retail, and technology. Notably, the non-profit sector saw a dramatic surge in ransomware attacks, with incidents doubling quarter-over-quarter .

Ransomware gangs claimed responsibility for targeting 6,133 victims in 2024.

Only 31% of ransoms were paid by At-Bay customers in 2024. This totaled $146M in unpaid ransoms.

The frequency of ransomware attacks in 2024 increased by 19% vs. 2023.

Mid-sized companies generating $25-100M in revenue saw a 46% increase in ransomware attacks.

Ransomware attacks increased by nearly 20% in 2024.

96% of organizations attacked by ransomware said backups were targeted.

Almost every organization (96%) that has experienced a ransomware attack in the past two years said that their backup data has been targeted at least once.

45% of organizations experienced multiple ransomware attacks.

49% of affected organizations took up to five business days to recover from a ransomware attack.

81% of IT professionals say immutable backup storage built on Zero Trust principles is the best defense against ransomware.

Two-thirds of organizations suffered a ransomware attack.

Most affected organizations could not recover all of their data after a ransomware attack.

Over 90% of IT decision-makers said that Zero Trust principles, storing backup copies in multiple locations, and segmenting backup software and storage provide the defense needed to protect against ransomware threats.

94% of IT decision-makers said that immutable backups are essential to achieving a comprehensive ransomware protection strategy.

54% of IT professionals view target backup appliances as more secure than integrated appliances.

23% of UK businesses have been affected by ransomware .