State Of Ransomware Report 2024
The fifth Sophos annual study of the real-world ransomware experiences of organizations around the globe explores the full victim journey, from root cause through to severity of attack, financial impact, and recovery time. Fresh new insights combined with learnings from our previous studies reveal the realities facing businesses today as well as how the impact of ransomware has evolved over the last five years.
This year’s report also incorporates brand new areas of study, including exploration of ransom demands vs. ransom payments, together with a heightened focus on the impact an organization’s revenue has on their ransomware outcomes. Plus, for the first time, it shines a light on the role of law enforcement in ransomware remediation.
A note on reporting dates
To enable easy comparison of data across our annual surveys, we name the report for the year in which the survey was conducted: in this case, 2024. We are mindful that respondents are sharing their experiences over the previous year, so many of the attacks referenced occurred in 2023.
About the survey
The report is based on the findings of an independent, vendor-agnostic survey commissioned by Sophos of 5,000 IT/cybersecurity leaders across 14 countries in the Americas, EMEA, and Asia Pacific. All respondents represent organizations with between 100 and 5,000 employees. The survey was conducted by research specialist Vanson Bourne between January and February 2024, and participants were asked to respond based on their experiences over the previous year. Within the education sector, respondents were split into lower education (catering to students up to 18 years) and higher education (for students over 18 years).
You may be interested in
Critical PHP vulnerabilities: do you know who owns the fix?
When websites and applications sit with different teams and suppliers, the first challenge is knowing who needs to act. Critical vulnerabilities have been disclosed affecting PHP, a technology widely used across websites, web applications and other software products. The technical advice is clear: identify affected systems and apply the available updates. But for many organisations, the first challenge is understanding where PHP is being used, who manages those systems and who is responsible for taking action. To help you identify potential exposure, we have created a PHP Security Checker to determine whether your systems have…
Beyond the Filing Cabinet: What Document Management Actually Saves You
Document Management for Small Offices with DocuWare For many small offices, document management still means a filing cabinet, a shared drive with inconsistent folder names, and a lot of time spent searching for the one contract or invoice somebody needs right now. DocuWare replaces that with a structured, searchable system that sits behind your everyday paperwork. What does DocuWare mean in practice? Giving Office Managers time back For an Office Manager who is often the person holding the whole administrative process together, this is time back. Fewer interruptions to find a document for a colleague,…
Copilot vs. Claude
Why Microsoft 365 Copilot fits every day work A plain-English guide for people trying AI at work: what Copilot does, how it differs from a separate assistant such as Claude and where to start. The short answer Claude is a separate AI workspace. Copilot sits inside the Microsoft apps many teams already use and can work with the emails, files and meetings each person is allowed to access. A separate assistant helps when: Copilot helps when: – You need help creating or developing content from scratch. – The task is focused research, reasoning or code….
Microsoft is changing Copilot billing. Here’s how to stay in control of AI costs
From 1 December 2026, new Microsoft 365 Copilot Business purchases through CSP will come with usage-based billing already configured. At first glance, that might sound like another variable cost for IT and finance teams to manage. But it also gives businesses a practical way to access the next generation of Copilot experiences while retaining control over who can use them, how much they can spend and where that money goes. This matters because Copilot is changing. New experiences such as Copilot Cowork are designed to carry out larger, multi-step pieces of work. That creates more…
Phishing just got personal
AI-powered phishing attacks are becoming harder to detect, with increasingly sophisticated emails bypassing traditional security controls. As a result, organisations are placing greater focus on Human Risk Management, recognising employee behaviour as a measurable cybersecurity risk. SecureLearn, powered by KnowBe4 and fully managed by Espria, helps businesses reduce human risk through continuous security awareness training, phishing simulations, targeted coaching, and board-ready reporting that demonstrates improvement over time.
The Hidden Environmental Cost of Office Printing
Most offices know that reducing paper is good for the environment, but few have visibility over what their printing actually costs in resources: energy, paper, and consumables. A managed print service brings sustainable office printing into focus by measuring what is actually happening, rather than estimating it. Every printer left on standby overnight, every unnecessary colour print, and every cartridge thrown away with usable toner left inside adds up. For a business printing several thousand pages a month, the difference between an efficient and inefficient setup can be significant, both in cost and in environmental…