Ransomware attacks soar 82% in one year, with average payment up 400%

Businesses are facing an unprecedented threat from ransomware attacks, with downtime now averaging 24 days per incident and ransom demands skyrocketing by 400%, according to the latest industry insights from cybersecurity firm, Certes.

  • Thursday, 20th March 2025 Posted 1 month ago in by Phil Alsop

As cybercriminals evolve their tactics, leveraging AI-driven attacks and large-scale data exfiltration, organisations must rethink their cybersecurity strategies to protect not just their networks, but their data itself.

The data reveals a concerning upward trend in ransomware incidents, with a staggering 82% increase in attacks in the past year alone. In January 2025, there were 510 reported ransomware victims, up from 280 in January 2024. Despite increased global efforts to tackle the issue, ransomware groups continue to emerge, employing increasingly sophisticated techniques to breach defences and hold businesses to ransom.

The impact of these attacks extends beyond financial losses. Prolonged operational downtime, reputational damage, and regulatory penalties are among the many risks enterprises face. High-profile cases such as the Ticketmaster and Ministry of Defence breaches highlight the vulnerabilities across industries, from large corporations to critical government infrastructure.

“Traditional network security is no longer enough,” said Simon Pamplin, CTO at Certes. “Attackers aren’t just breaching firewalls; they are targeting data directly. Businesses need to shift their focus towards securing their most valuable asset, the data, rather than just defending the perimeter.”

Ransomware attacks are particularly prevalent in data-rich and high-value sectors, including large charities and financial institutions, where cybercriminals see greater potential for ransom payments. The UK has become a key target, experiencing 5% of the world’s ransomware attacks, while the US remains the primary target, accounting for over 50% of incidents.

“The statistics are alarming,” continued Simon. “Beyond the immediate cost of a ransom payment, businesses suffer from lost productivity, eroded customer trust, and in many cases, regulatory fines. The reality is that 80% of organisations that pay a ransom experience another attack soon after. Prevention is key, and that means taking a more holistic approach to cybersecurity.”

With the continued evolution of ransomware tactics, including generative AI and LLM-driven attacks, businesses must adopt a proactive stance. Experts predict that 2025 will see a further escalation in attack volumes, forcing organisations to adapt their security strategies.

“Cyber resilience is no longer optional,” said Simon. “Businesses must invest in robust data protection strategies that go beyond standard defences. The future of cybersecurity is not just about keeping attackers out, it’s about ensuring your data is protected, wherever it resides.”

Alarming deficiencies in security readiness

Posted 22 hours ago by Phil Alsop
Cybersecurity readiness remains alarmingly low as only 4% of organizations worldwide have achieved a mature level of readiness.
Over half of public sector IT leaders (58%) say skill and talent gaps are a top challenge to digital transformation efforts.
With International Anti-Ransomware Day approaching on May 12, Kaspersky presents its annual report on the evolving global and regional ransomware...

Majority of businesses are exploring quantum AI

Posted 23 hours ago by Phil Alsop
Quantum computing and related technologies like quantum AI are regarded as the next big wave after AI. A global survey of 500 business leaders across...
High-profile cyberattacks highlight a recurring issue: employees are often the weakest security link.
New research from Ventrica shows that UK companies can’t afford to replace humans with AI in customer service enquiries, with an emotive experience...
Kubernetes has firmly transitioned from an emerging technology into a core part of enterprise production environments, according to a new survey from...
Findings from ‘Unlocking Growth in the Mid-Market: The Node4 Report’ point to a lack of alignment around AI investment, public cloud consumption,...