Welcome to the sixth edition of the annual Sophos State of Ransomware report which reveals the reality of ransomware in 2025.
This year’s report details how organizations’ experiences of ransomware both cause and consequences have evolved over the last 12 months. It also shines light into previously unexplored areas, including the operational factors that left organizations exposed to attack and the human impact of incidents on the IT/cybersecurity team.
Based on the real-world frontline experiences of 3,400 IT and cybersecurity leaders across 17 countries whose organizations were hit by ransomware in the last year, the report provides unique insights into:
