Due to rounding, some totals do not correspond with the sum of separate figures.
The source phrased the survey question as follows: "Did your organization get the data back in the most significant ransomware attack?"
The State of Ransomware 2022: Infographic
Citation formats
Organizational data retrieval methods after a ransomware attack 2025
After experiencing a ransomware attack, roughly ** percent of organizations worldwide paid up ransom fees to get their encrypted data back. Survey data from January to March 2025 found that ** percent of the affected companies used bachups to restore the data.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how ÌÇÐÄÆƽâ°æ can support your business.
Sophos. (June 30, 2025). Methods of organizations compromised by ransomware to get their encrypted data back as of March 2025 [Graph]. In ÌÇÐÄÆƽâ°æ. Retrieved July 15, 2026, from /statistics/1246430/getting-data-back-after-a-ransomware-attack/
Sophos. "Methods of organizations compromised by ransomware to get their encrypted data back as of March 2025." Chart. June 30, 2025. ÌÇÐÄÆƽâ°æ. Accessed July 15, 2026. /statistics/1246430/getting-data-back-after-a-ransomware-attack/
Sophos. (2025). Methods of organizations compromised by ransomware to get their encrypted data back as of March 2025. ÌÇÐÄÆƽâ°æ. ÌÇÐÄÆƽâ°æ Inc.. Accessed: July 15, 2026. /statistics/1246430/getting-data-back-after-a-ransomware-attack/
Sophos. "Methods of Organizations Compromised by Ransomware to Get Their Encrypted Data Back as of March 2025." ÌÇÐÄÆƽâ°æ, ÌÇÐÄÆƽâ°æ Inc., 30 Jun 2025, /statistics/1246430/getting-data-back-after-a-ransomware-attack/
Sophos, Methods of organizations compromised by ransomware to get their encrypted data back as of March 2025 ÌÇÐÄÆƽâ°æ, /statistics/1246430/getting-data-back-after-a-ransomware-attack/ (last visited July 15, 2026)
Methods of organizations compromised by ransomware to get their encrypted data back as of March 2025 [Graph], Sophos, June 30, 2025. [Online]. Available: /statistics/1246430/getting-data-back-after-a-ransomware-attack/
