51% of organizations increased general cybersecurity investment following ransomware attacks

48% of organizations identified faster and more automated attack chains as the greatest threat from ransomware.

34% of victim organizations experienced reputational damage that undermined customer and partner trust.

24% of victims were affected by publicly released or stolen data, leading to ongoing competitive and compliance risks.

Public sector organizations faced the highest average downtime costs at $2.5 million USD per incident.

48% of organizations experienced encrypted or lost access to data or systems due to ransomware.

22% of organizations reported a loss of customer or business opportunities as a result of ransomware incidents.

24% of organizations faced legal and regulatory penalties as a result of ransomware incidents.

Healthcare organizations reported an average downtime cost of $1.5 million USD per ransomware incident.

Financial services organizations had an average downtime cost of $1.3 million USD per ransomware incident.

45% of organizations that paid ransoms could not recover all of their data even after paying.

83% of organizations that paid ransoms experienced another attack from the same or different threat actor.

93% of organizations that paid ransoms learned that data was exfiltrated despite payment.

82% of organizations acknowledge that they are not equipped to weather the reputational fallout from sensitive data leaks.

39% of organizations could not fully recover from backups after their last ransomware incident.

57% of organizations in the U.K. and Singapore expressed concern about social engineering tactics

53% of French organizations reported concern about GenAI-enabled malware, compared to an average of 40% across geographies

42% of U.S. adults reported AI-generated phishing emails as a top concern regarding cybersecurity threats

Over 40% of organizations reported using AI or automation to support threat detection and alerting in response to a ransomware incident

57% of French organizations reported the greatest concern about AI-enabled threats, compared to an average of 45% across geographies