From risk to resilience, 2025 ransomware trends and proactive strategies
Based on a survey of 1,300 organizations globally, the report identifies six key ransomware trends for 2025: law enforcement actions are forcing threat actors to adapt; data exfiltration attacks are growing; ransom payments are decreasing; legal and regulatory consequences are emerging; collaboration is reinforcing resilience; and security and recovery budgets are increasing, although more investment is needed.
The report notes that the share of organizations affected by at least one ransomware attack resulting in encryption or data exfiltration fell from 75% to 69% compared with the previous survey.
The report also examines the practices associated with more successful outcomes.
Ransomware playbooks, secure and immutable backups, backup integrity verification, clear chains of command, incident response processes and stronger alignment between IT operations and security teams are highlighted as critical elements.
Among the findings, 89% of organizations had backup repositories targeted, while only 32% used immutable repositories or services and 26% had a defined ransom-payment decision process.
The final section translates these findings into actions, including robust incident response plans, a 3-2-1-1-0 data resilience strategy, proactive security measures such as zero-trust architecture and identity and access management, greater investment in threat detection and backup solutions, and employee security training.
The report emphasizes that organizations with stronger outcomes make cyber resilience part of their daily operations rather than treating it solely as a response to an attack.
Access the full report.
|
|
