Connect with us

E-Business

Half of Cybercrime Victims Paid Ransom in 2025-  Sophos

Published

on

Kindly share this post

Cybercriminals continue to profit handsomely, with nearly half of all victimised organisations paying ransom demands in 2025.

Half of Cybercrime Victims Paid Ransom in 2025-  Sophos

This is despite global efforts to curb the spread of ransomware, according to the State of Ransomware 2025 report released by Sophos, a global leader in cybersecurity solutions.

The sixth annual edition of the report, which surveyed 3,400 IT and cybersecurity leaders across 17 countries, revealed that 49 per cent of organisations hit by ransomware attacks opted to pay the ransom to regain access to their encrypted data, the second-highest payment rate recorded by Sophos in the last six years.

While the median ransom demand decreased by a third compared to 2024, the median payment still stood at $1 million, underscoring the continued profitability of ransomware for cybercriminals. Notably, 53 per cent of organisations that paid a ransom were able to negotiate a lower settlement than initially demanded, often through third-party negotiators or internal efforts.

In his reaction, Chester Wisniewski, director and field CISO at Sophos,  averred that for many organisations, the chance of being compromised by ransomware actors is just a part of doing business in 2025, adding that the good news is that, thanks to this increased awareness, many companies are arming themselves with resources to limit damage.

Among those who paid less than the initial demand, 71 per cent successfully negotiated a lower figure. While this signals an increasing awareness and tactical response among victim organisations, the report also noted persistent challenges.

For the third consecutive year, exploited vulnerabilities were identified as the leading technical root cause of ransomware attacks.

Alarmingly, 40 percent of victims said attackers exploited a security gap they were unaware of, underscoring a widespread lack of visibility into organizations’ digital infrastructure.

Additionally, 63 per cent of respondents cited resource constraints, including insufficient personnel or expertise, as contributing factors to their susceptibility. For large enterprises (3,000+ employees), lack of expertise topped the list, while mid-sized organisations (251–500 employees) most frequently cited a lack of personnel.

The use of data backups to restore information following an attack has fallen to its lowest point in six years, with only 54 per cent of companies relying on backups — a drop from previous years.

Despite this, organisations are recovering faster: 53 per cent reported full recovery within one week, up from 35 per cent in 2024. Only 18 percent of firms took over a month to recover, a significant improvement from last year’s 34 per cent.

Sophos attributes these gains to better incident response capabilities and a growing trend toward using Managed Detection and Response (MDR) services.

Such services help companies detect attacks early, respond effectively, and, in some cases, stop attacks in progress.

The report also found significant variation in ransom demands based on industry and company size, adding that organisations with over $1 billion in revenue faced median ransom demands of $5 million; those earning $250 million or less saw demands under $350,000; state and local governments reported the highest median ransom payments at $2.5 million and healthcare organisations paid the lowest, at a median of $150,000.

While attackers are still extracting sizable payments, the overall cost of ransomware recovery has dropped, from $2.73 million in 2024 to $1.53 million in 2025. Sophos credits increased preparedness, improved threat visibility, and wider use of professional response services for this decline.

To further reduce the risk and impact of ransomware, Sophos advises organisations to regularly patch known vulnerabilities and maintain updated security systems; employ multi-factor authentication (MFA) and anti-ransomware protection across all endpoints; use MDR services or maintain 24/7 internal security monitoring; test and maintain a robust incident response plan and ensure regular backups are not only taken but tested for restoration.

As ransomware evolves, so must corporate defenses.

Though the profitability of ransomware remains alarmingly high, the increasing resilience among targeted organisations is a sign of hope and a call to action for those still behind the curve.

 

 

 

 

 


Kindly share this post

Ebere Melum-Nwogbo is a trained and practicing journalist. She is passionate about ICT and business journalism. She has over a decade experience spanning money and capital market as well as information technology

E-Business

NDPC Commits to Balancing Data Privacy, Protection Information

Published

on

Kindly share this post

Nigerian Data Protection Commission (NDPC), has expressed its commitment to balance information around data privacy and protection.

NDPC Commits to Balancing Data Privacy, Protection Information

Dr. Vincent Olatunji, national commissioner, NDPC, stated this in Abuja, at the National Data Privacy Summit with the theme, “Privacy in the Era of Emerging Technologies,” organised by the commission.

Olatunji said the NDPC, at the moment, was looking at balancing information around data privacy and protection.

“What we are doing is just to look at how to balance information around privacy and protection, which is really important, because as we are innovating, at the same time, we have to consider issues around privacy and protection,” he stated.

He added that the commission has been very bold in taking risks that would bring about growth.

“Our starting point is growing at a very alarming rate, and we are not afraid of anything. We can take risks. And that is why a lot is happening in Nigeria, and this is the level of clarity,” he explained.

In his address, Dr. Aminu Maida, executive vice chairman (EVC) of the Nigerian Communications Commission (NCC),  stated that Internet of Things holds promise for Nigeria’s economy.

The EVC, who was represented by Abraham Oshadami, executive commissioner, Technical Services (ECTS), noted that, “in an era in which digital assets, Internet of Things, future digital computing and other transformative technologies are key, and both a cornerstone of building trust for the adoption and a prerequisite for sustainable progress.

“Emerging technologies hold immense promise for Nigeria’s grand economy, but they also introduce complex risks to personal and individual rights.

“So, balancing innovation through post-ethical safeguards and public trust is the first step to ensuring that global digital advancement benefits all Nigerians without compromising their privacy or their security,” he added.

“As we just heard from the Nigeria Police, telecom operators have a vast amount of sensitive historical information daily, including connectivity apps and collaboration on privacy, security, and number protection, both to their and their inheritors,” he said.

Dr. Bako Shurkuk, commissioner for Science, Technology and Innovation, Plateau State, who represented Caleb Mutfwang, Governor of Plateau State, said, emerging technologies can be harnessed to attain sustainable growth.

 


Kindly share this post
Continue Reading

E-Business

OADC Lagos Reinforces Commitment to Local Data Hosting and Digital Transformation @ NDPC’s National Privacy Week Summit

Published

on

Kindly share this post

Open Access Data Centres (OADC) Lagos has reaffirmed its commitment to Nigeria’s data protection and digital transformation agenda through its sponsorship and active participation in the Nigeria Data Protection Commission’s (NDPC) National Privacy Week Summit.

The National Privacy Week Summit, organised by the NDPC, convened policymakers, regulators, technology providers, and industry stakeholders to promote data privacy awareness, strengthen compliance with the Nigeria Data Protection Act (NDPA), and advance conversations around data security, sovereignty, and responsible data governance.

As a sponsor of the event, OADC Lagos demonstrated its continued support for the Federal Government’s drive toward local data hosting and data domiciliation, which are increasingly critical to safeguarding sensitive information, enhancing regulatory compliance, and building trust in Nigeria’s digital economy.

Through its carrier-neutral, Tier III Design certified data centre in Lekki, Lagos, OADC provides secure, resilient, and compliant infrastructure that enables government institutions and private sector organisations to host and manage data locally while meeting international best practices.

Commenting on the engagement, Adesola Adesugba, Country Marketing Manager, Open Access Data Centres Nigeria, said: “We are proud to have supported the Nigeria Data Protection Commission through the National Privacy Week Summit and to stand alongside the government in advancing Nigeria’s digital transformation objectives.

“Strengthening local data hosting and domiciliation is fundamental to national data sovereignty, improved security, and sustainable digital growth, and OADC Lagos remains committed to enabling this future.”

OADC’s participation at National Privacy Week Summit underscores its role as a trusted digital infrastructure partner to government and enterprise, supporting secure cloud connectivity, regulatory compliance, and the long-term development of Nigeria’s digital ecosystem.

Open Access Data Centres is part of the WIOCC Group and operates open-access, world-class data centres across Africa, serving cloud providers, network operators, enterprises, and public sector institutions.


Kindly share this post
Continue Reading

E-Business

Kaspersky Launches OT Calculator to Align Cybersecurity Investments with Business Goals

Published

on

Kindly share this post

Kaspersky’s new online tool has been specially developed for industrial organisations to assess the potential costs associated with insufficient operational technology (OT) security.

By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions regarding security investments.

Industrial organisations increasingly depend on interconnected systems, elevating cybersecurity to a critical factor in business resilience and profitability.

According to VDC Research, over 60% of industrial companies last year reported that cybersecurity breaches had led to significant costs. Despite this, a persistent disconnect remains between security teams and executive leadership as security professionals focus on minimising risk, while executives must balance cybersecurity concerns with broader business objectives. This misalignment often results in competing priorities and underfunded security initiatives.

To bridge this gap, Kaspersky has launched the OT Cybersecurity Savings Calculator, an innovative online tool designed specifically for industrial organisations to assess the potential costs of inadequate operational technology (OT) security¹.

The primary aim of this tool is to translate cyber risks into tangible financial metrics and support strategic discussions around priorities and budget allocation. By entering details such as their sector, sub-sector, region, company size, breach history, and existing cybersecurity measures, organisations can estimate their potential cost savings and receive customised, actionable recommendations.

The calculator benchmarks performance against industry peers and highlights the company’s position within the current threat landscape.

“We believe this calculator is a powerful resource for transforming complex cyber risk data into straightforward financial insights. It enables OT leaders, security professionals, and executive teams to develop clear, data-driven business cases and recognise the value of cybersecurity investments. With actionable guidance, it promotes a comprehensive approach to resource management and strengthens overall organisational resilience,” comments Andrey Strelkov, Head of Industrial Cybersecurity Product line at Kaspersky.


Kindly share this post
Continue Reading

Trending