Ransomware now plays a role in nearly half of all breaches, new research finds

Summary: Verizon’s 2025 Data Breach Investigations Report revealed that ransomware was involved in 44% of data breaches last year, with notable impacts on small and medium-sized businesses. The report highlights a significant increase in organizations refusing to pay ransoms, alongside a decline in the median amounts paid. Despite this progress, ransomware continues to pose a serious threat across all industries, particularly affecting local governments.

Affected: Organizations of all sizes, particularly small and medium-sized businesses, local governments

Keypoints :

• Ransomware was involved in 44% of data breaches, with most hack incidents stemming from credential abuse and exploitation of vulnerabilities.
• 64% of ransomware victims chose not to pay the ransom, up from 50% two years ago; the median paid dropped to 5,000.
• 88% of breaches in small and medium-sized businesses involved ransomware, compared to 39% in larger organizations.
• Ransom payments under million increased to 95%, down from .9 million in 2023.
• Ransomware is increasingly targeting financial firms, manufacturing, and government sectors.