76% of organizations expressed concern about their ability to stop ransomware spreading from an unmanaged host over SMB

45% of victims reported that phishing was the initial point of compromise in ransomware attacks

35% of ransomware incidents were attributed to supply chain compromise

87% of organizations consider AI-generated social engineering tactics more convincing than traditional methods.

76% of organizations agree that it is increasingly difficult to prepare for ransomware attacks as attackers use AI to adapt and evade defenses.

53% of organizations implemented AI-powered threat detection.

41% of public sector organizations implemented AI-powered threat detection.

37% of U.S. adults reported GenAI-enabled malware as a top concern regarding cybersecurity threats

57% of French organizations reported the greatest concern about AI-enabled threats, compared to an average of 45% across geographies

Over 40% of organizations reported using AI or automation to support threat detection and alerting in response to a ransomware incident

42% of U.S. adults reported AI-generated phishing emails as a top concern regarding cybersecurity threats

53% of French organizations reported concern about GenAI-enabled malware, compared to an average of 40% across geographies

57% of organizations in the U.K. and Singapore expressed concern about social engineering tactics

39% of organizations could not fully recover from backups after their last ransomware incident.

83% of organizations that paid ransoms experienced another attack from the same or different threat actor.

82% of organizations acknowledge that they are not equipped to weather the reputational fallout from sensitive data leaks.

93% of organizations that paid ransoms learned that data was exfiltrated despite payment.

45% of organizations that paid ransoms could not recover all of their data even after paying.

Financial services organizations had an average downtime cost of $1.3 million USD per ransomware incident.

Healthcare organizations reported an average downtime cost of $1.5 million USD per ransomware incident.