Motivations for paying a ransom included: Not wanting data leaked (47%), inability to afford downtime (47%), having cyber insurance (41%), and all of the above (40%).

January 1, 2025

Motivations for paying a ransom included: Not wanting data leaked (47%), inability to afford downtime (47%), having cyber insurance (41%), and all of the above (40%). — This cybersecurity statistic was published by Illumio & Ponemon Institute in January 2025. The original data appears in The Global Cost of Ransomware Study . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 1/1/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Motivations for paying a ransom included: Not wanting data leaked (47%), inability to afford downtime (47%), having cyber insurance (41%), and all of the above (40%). This data was published by Illumio & Ponemon Institute.

Where does this data come from?

This statistic comes from The Global Cost of Ransomware Study , published by Illumio & Ponemon Institute on January 1, 2025. You can view the original report at https://www.illumio.com/resource-center/cost-of-ransomware.

What cybersecurity topics does this cover?

This statistic was published by Illumio & Ponemon Institute. Browse more statistics from Illumio & Ponemon Institute.

CYBERSTATS

Motivations for paying a ransom included: Not wanting data leaked (47%), inability to afford downtime (47%), having cyber insurance (41%), and all of the above (40%).

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

51% of ransomware victims paid a ransom demand.

35% of organisations experienced brand damage as a consequence of a ransomware attack in 2024, up from 21% in 2021.

Of the 49% of ransomware victims that did not pay a ransom, the main reasons were: compromised data wasn't critical (49%), having an effective backup strategy (48%), company policy (47%), lack of trust in the provision of a decryption key (46%), and law enforcement advice (40%).

The primary reasons for not reporting these incidents were unwanted publicity (39%), being up against a payment deadline (38%), fear of retaliation (38%), and not believing the extortion demand was exorbitant (24%).

Only 28% of respondents said their organisations informed law enforcement when they were hit by ransomware.

Data exfiltration was the most common tactic used by ransomware groups to exert pressure (47%), followed by DDoS attacks (45%), data encryption (43%), and communicating with stakeholders/customers (34%).

Stay Ahead of Cyber Threats