VendorsSophos
Sophos
Cybersecurity reports and statistics published by Sophos
8 categories5 reports
Research Reports
Reports and publications from Sophos
Recent Statistics & Reports
67% of ransomware victims confirmed their ransomware incident stemmed from an identity attack.
5/27/2026•
RansomwareIdentity Compromise
Mean recovery cost for identity-related incidents reached $1.64 million, with a median of $750,000, and 73% of affected organizations facing costs of $250,000 or more.
5/27/2026•
Cost of BreachFinancial ImpactIdentity-Related Breach
One-third of organizations regularly rotate or audit service accounts and non-human identities, while just 11% do so continuously.
5/27/2026•
Non-Human IdentitiesAccess ManagementIdentity Attack
Weak non-human identity (NHI) management was cited in 41% of identity incidents.
5/27/2026•
Non-Human IdentitiesCredentials ManagementIdentity Attack
Organizations with weak NHI management pay approximately $150,000 more to recover from incidents than average.
5/27/2026•
Cost of BreachNon-Human Identities
Human error (employees tricked into providing credentials) was cited in nearly 43% of identity incidents.
5/27/2026•
Human ErrorSocial EngineeringIdentity Attack
71% of organizations suffered at least one identity-related breach in the past year.
5/27/2026•
Identity SecurityData BreachIdentity-Related Breach
Organizations that find compliance requirements very challenging have a breach rate of 82.4%, which is 14 percentage points higher than organizations with lower compliance difficulty (68.3%).
5/27/2026•
ComplianceBreach RiskIdentity Attack
Energy, oil/gas, and utilities reported an 80% breach rate and federal/central government report a 78% breach rate, the highest across industries surveyed.
5/27/2026•
Critical InfrastructureGovernmentIdentity Attack
14% of breached organizations cannot detect and stop their most significant identity attack before damage is done.
5/27/2026•
DetectionIncident ResponseIdentity Attack
Only 24% of organizations continually monitor for unusual login attempts.
5/27/2026•
Access MonitoringSecurity Visibility
When identity breaches impact business, the primary consequences are data theft (49%), ransomware (48%), and financial theft (47%).
5/27/2026•
Data TheftRansomwareFinancial Theft
10% of organizations reported an identity breach that impacted their business in the last year.
5/27/2026•
Identity BreachBusiness Impact
More than 50% of organizations check for unusual login attempts every three months or less.
5/27/2026•
Access MonitoringSecurity Visibility
Organizations with weak NHI management are 22% more likely to experience financial theft.
5/27/2026•
Financial TheftNon-Human Identities
5% of organizations reported six or more identity-related breaches.
5/27/2026•
Repeat VictimizationIdentity SecurityIdentity-Related Breach
Organizations reported an average of three separate identity-related incidents.
5/27/2026•
Identity SecurityIncident FrequencyIdentity-Related Breach
62% of retailers who experienced attacks restored their data using backups in 2025, the lowest rate in four years
11/9/2025•
RansomwareEncrypted dataBackup
47% of retail IT/cybersecurity teams reported increased pressure after experiencing data encryption in 2025
11/9/2025•
RansomwareData encryptionRetail
The average cost of recovering from a ransomware attack in retail, excluding any ransom payment, dropped by 40% to $1.65 million in 2025, the lowest point in three years
11/9/2025•
RansomwareRansom Retail
Showing 1-20 of 60 results