Industry is doing better against ransomware

The industrial sector is showing improvement in its protection against ransomware, according to a recent study by security firm Sophos. Compared to previous years, many industrial companies are now able to stop ransomware attacks before data is encrypted. This year, only 40% of cyberattacks against industrial entities resulted in data encryption.

See also: SonicWall ransomware attacks are a lesson for mergers and acquisitions

This is the lowest number in the last five years and a decrease from 74% in 2024, Sophos reports.

However, data theft remains a key risk in the sector, with 39% of manufacturers whose data was encrypted by ransomware also experiencing data loss — one of the highest rates of all industries surveyed.

One of the results, according to the study, is that more than half of the affected companies paid the ransom despite improved defense measures. The average ransom amount was around €861,000, compared to an average demand of around €1 million.

See also: Alliances of ransomware groups lead to increase in attacks

Shortages of specialized personnel and inadequate protection facilitate attacks

More than four in ten industrial companies (43%) cited a lack of expertise as a reason for the cyber incident. Unknown security vulnerabilities were cited by 42% and a lack of protective measures by 41%.

Additionally, the results show that ransomware attacks continue to place a significant burden on IT and security teams. Nearly half of industrial companies (47%) reported increased stress among their teams following data encryption. Meanwhile, 44% are experiencing increased pressure from management, and 27% confirmed a change in leadership as a result of the attack — a percentage that is consistent with the general trend of security leaders losing their jobs following a ransomware attack.

See also: Canon breached by Clop ransomware group

The study surveyed 332 industrial companies worldwide that were affected by ransomware in the past year.