Cybersecurity statistics / Ransom Payments
| Publisher | Sophos |
| Report | The State of Ransomware 2026 |
| Published | 15 July 2026 |
| Topics | Ransom Payments, Economics |
Published by Sophos in The State of Ransomware 2026, 15 July 2026. The figure is taken from the report as published; the full methodology is in the source.
| 54% of organizations affected by ransomware pay a ransom. Proofpoint, 25/07/2026 |
| 93% of US organizations affected by ransomware pay a ransom. Proofpoint, 25/07/2026 |
| 37% of organizations that paid a ransom face a second extortion demand. Proofpoint, 25/07/2026 |
| No ransom payments were confirmed in H1 2026 in the education sector, and five entities confirmed they had not met their hackers’ demands. Comparitech, 25/07/2026 |
| 48% of victims whose data was encrypted pay the ransom, roughly in line with a four-year average of about 50%. Sophos, 18/07/2026 |
| Median ransom demand is $698,000, down 65% over two years. Sophos, 18/07/2026 |
Weekly cybersecurity statistics by email.