Sophos claims 53% of Indian companies surveyed paid ransom to recuperate knowledge from cyberattacks

UK-based cybersecurity agency Sophos on Wednesday claimed that 53 per cent of Indian corporations that confronted ransomware assaults in 2024 paid the hackers to get their knowledge again.

Based on the State of Ransomware in India 2025 report, the median payout in the direction of ransom was $481,636 (about ₹4 crore), down 79 per cent from the earlier 12 months.

The findings are primarily based on a survey commissioned by Sophos and performed throughout January-March 2025. As many as 378 Indian IT and cybersecurity companies affected by a ransomware assault had been a part of the examine.

Nevertheless, the survey didn’t title any corporations which fell prey to cyberattacks and paid the ransom for restoration of information.

“The median ransom demand fell by 52 per cent, from $2 million to $961,289, whereas the median cost dropped much more sharply by 79 per cent to $481,636,” the report mentioned.

Despite the fact that corporations are paying much less ransom, they spend some huge cash fixing the injury attributable to these assaults. On common, Indian corporations spend about $1.01 million on restoration prices, excluding the ransom cash, the report mentioned.

The commonest technical causes of ransomware assaults had been exploited vulnerabilities (29 per cent), compromised credentials (22 per cent), and malicious emails (21 per cent).

Operational challenges comparable to lack of expert personnel, poor-quality safety, and inadequate cybersecurity merchandise had been cited by round 40 per cent of respondents as contributing elements to ransomware victimization.

Printed on July 2, 2025