Get in touch
Sophos

State of Ransomware 2025

June 2025
Research parameters
Topic:
Ransomware
Countries:
US, Brazil, Colombia, Mexico, Chile, UK, France, Germany, Switzerland, Italy, Spain, South Africa, UAE, India, Australia, Japan, Singapore
No. of interviews:
3,400
Methodology:
Quantitative
Respondent profile:
IT decision makers

Brief

The annual State of Ransomware is a long-running and successful report series for Sophos, helping drive significant engagement and coverage for the brand. For this year’s report, Sophos wanted to explore more about cybersecurity fatigue and tool use.

Solution

In order to understand how their ransomware experiences are changing, the impact of cybersecurity fatigue and their use of different cybersecurity tools, we developed and ran an international survey of 3,400 decision makers across the US, Europe, Asia and South America.

Outcome

The research are the foundation of the latest edition of their report, Sophos State of Ransomware 2025. The report helps reinforce perceptions of Sophos as a thought leader within the industry, driving over 700 press articles across different sectors.

Read the press release.

Read the report.

Key findings

32%
Exploited vulnerabilities was the most common root cause of ransomware incidents
49%
have paid the ransom and got their data back
57%
of ransom demands and 52% of payments were for $1 million or more
Want to be on our website too? Let’s talk
Research Manager
Research Consultant