Ransomware attacks against the manufacturing sector surged from 520 incidents in 2024 to 838 incidents in 2025, marking a 61% increase.

In 2025, Italy experienced 74 ransomware incidents, representing 1.6% of all attacks.

In 2025, 77.7% of ransomware attacks were attributed to other actors outside the top five groups.

In 2025, the United States experienced 21.3% of all ransomware attacks, totaling approximately 1,000 incidents.

In 2025, Canada experienced 139 ransomware incidents, accounting for 3.0% of all attacks.

In 2025, half of all ransomware attacks worldwide targeted essential sectors such as manufacturing, healthcare, energy, transportation, and finance, indicating a shift from opportunistic crime to systemic disruption.

51% of organizations deployed automated incident response.

Ransomware attacks in the manufacturing sector surged by 61% from 520 incidents to 838 incidents year-over-year, marking the steepest growth among all sectors.

In 2025, the United States accounted for roughly 1,000 ransomware incidents targeting critical infrastructure, representing 21% of all global ransomware attacks.

In 2025, the United Kingdom experienced 76 ransomware incidents, accounting for 1.6% of all attacks.

48% of organizations adopted AI-enhanced phishing detection.

33% of ransomware incidents involved compromised credentials

61% of organizations successfully restored from backups after their most recent incident.

Fewer than 25% of organizations that experienced a ransomware attack recovered from the attack within 24 hours.

Nearly 25% of organizations that experienced a ransomware attack suffered significant disruption or data loss.

78% of organizations across Australia, France, Germany, India, Singapore, the United Kingdom, and the United States reported experiencing a ransomware attack within the past year.

Only 22% of victims who felt 'well-prepared' recovered from ransomware attacks within 24 hours

Nearly 40% of organizations were unable to fully restore the data they lost from ransomware attacks

93% of victims had data stolen despite paying ransom

38% of organizations fixed the issue that allowed attackers to enter after a ransomware attack