Adversaries maintained access to enterprise networks for nearly 2.5 weeks on average before being detected in ransomware incidents.
Adversaries maintained access to enterprise networks for nearly 2.5 weeks on average before being detected in ransomware incidents. — This cybersecurity statistic was published by ExtraHop in June 2026. It covers topics including Ransomware, Dwell Time, Detection. The original data appears in The 2026 ExtraHop Global Threat Landscape Report . For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
Adversaries maintained access to enterprise networks for nearly 2.5 weeks on average before being detected in ransomware incidents. This data was published by ExtraHop and covers Ransomware, Dwell Time, Detection.
Where does this data come from?
This statistic comes from The 2026 ExtraHop Global Threat Landscape Report , published by ExtraHop on June 28, 2026. You can view the original report at https://www.extrahop.com/resources/reports/the-2026-extrahop-global-threat-landscape-report.
What cybersecurity topics does this cover?
This statistic relates to Ransomware, Dwell Time, Detection. Browse more statistics on Ransomware or from ExtraHop.