Cybersecurity statistics / Ransom Payments
| Publisher | Sophos |
| Report | The State of Ransomware 2026 |
| Published | 15 July 2026 |
| Topics | Ransom Payments, Ransomware |
Published by Sophos in The State of Ransomware 2026, 15 July 2026. The figure is taken from the report as published; the full methodology is in the source.
| 54% of organizations affected by ransomware pay a ransom. Proofpoint, 25/07/2026 |
| 93% of US organizations affected by ransomware pay a ransom. Proofpoint, 25/07/2026 |
| 37% of organizations that paid a ransom face a second extortion demand. Proofpoint, 25/07/2026 |
| No ransom payments were confirmed in H1 2026 in the education sector, and five entities confirmed they had not met their hackers’ demands. Comparitech, 25/07/2026 |
| Median ransom payment is $769,000, down from $1,000,000 the previous year. Sophos, 18/07/2026 |
| In H1 2026, one government entity confirmed it paid a ransom while 16 government entities said they did not pay. Comparitech, 19/07/2026 |
Weekly cybersecurity statistics by email.