As reported by Resilience Forward in July, the Databarracks’ Data Health Check 2025 report shows that fewer than one in five UK organizations now pay the ransom following a ransomware attack. Additional information just released adds more detail to this headline figure.
The annual survey of 500 IT decision-makers reveals a significant shift in how organizations respond to attacks. Just 17% of those hit by ransomware in the past year paid the ransom – down from 27% in 2024 and 44% in 2023. Rather than paying, 57% of respondents were able to recover using business continuity measures. Better backup practices are a key factor in this:
- 72% of organizations now have air-gapped backups
- 59% have immutable backups
- Improving backup processes is now the top IT resilience priority.
The new data from the report also shows that more organizations are formalising their ransomware stance: 24% now have a policy never to pay a ransom – double the figure from 2023.
Paying the ransom used to feel like the only option. Now, the best-prepared organizations are recovering faster, more reliably, and without funding criminals. Air-gapped and immutable backups are giving organizations the confidence to say no.
James Watts, Managing Director at Databarracks
