The average cost of recovering from a ransomware attack in retail, excluding any ransom payment, dropped by 40% to $1.65 million in 2025, the lowest point in three years
The average cost of recovering from a ransomware attack in retail, excluding any ransom payment, dropped by 40% to $1.65 million in 2025, the lowest point in three years — This cybersecurity statistic was published by Sophos in November 2025. It covers topics including Ransomware, Ransom , Retail. The original data appears in State of Ransomware in Retail. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
The average cost of recovering from a ransomware attack in retail, excluding any ransom payment, dropped by 40% to $1.65 million in 2025, the lowest point in three years This data was published by Sophos and covers Ransomware, Ransom , Retail.
Where does this data come from?
This statistic comes from State of Ransomware in Retail, published by Sophos on November 9, 2025. You can view the original report at https://assets.sophos.com/X24WTUEQ/at/sjftg6wvk8v7ms294gbvnvh9/sophos-state-of-ransomware-retail-2025.pdf.
What cybersecurity topics does this cover?
This statistic relates to Ransomware, Ransom , Retail. Browse more statistics on Ransomware or from Sophos.