Hornetsecurity

61% of Chief Information Security Officers believe AI has directly increased ransomware risk

68% of organizations invested in AI-powered protection capabilities in 2025

Phishing attacks rose by 21% in 2025

Malware email attacks surged by 131% year-over-year in 2025

Email scams increased by 34.7% in 2025

77% of Chief Information Security Officers identified AI-generated phishing as a serious and emerging threat in 2025

Threat actors are diversifying their entry points, leading to 26% of ransomware incidents involving compromised endpoints.

Only 13% of ransomware victims paid the ransom in 2025, which is a decrease from 16.3% in 2024.

42% of security leaders admit that the training provided is still inadequate or too superficial.

77% of respondents view AI-driven phishing as a serious and emerging threat, up from 66.9 % in 2024.

In 2025, 24% of organizations reported being the victim of a ransomware attack (vs 18.6% reported in 2024).

46% of organizations report having ransomware insurance in 2025, a decrease from 54.6% in 2024.

62% of organizations now use immutable backups.

61% believe that AI has significantly increased the overall risk of ransomware attacks.

Phishing and email-based attacks dropped to 46% of all incidents in 2025, down from 52.3% in 2024.

Stolen credentials were involved in approximately 25% of ransomware attacks in 2025, up from an estimated 20% in 2024.

82% of organizations have implemented a Disaster Recovery (DR) Plan.

Exploited vulnerabilities also contributed to 12% of attacks in 2025.

74% of organizations report providing employee training to prevent ransomware, though this figure is a drop from 81.3 % in 2024.