Now in its 18th year, the 2025 edition of the Databarracks Data Health Check provides the views of 500 IT professionals across a range of industries. This year’s report reveals that while overall preparedness is improving, organizations face a rapidly evolving landscape – particularly when it comes to cyber threats and AI risks.
Key findings include:
- For the third year running, cyber is the leading cause of downtime and data loss: 71% of organizations experienced a cyber attack in the past year
- Testing has become the gold standard: 9 in 10 organizations tested elements of their recovery capabilities in the last 12 months, up significantly from previous years
- AI threats top the agenda: AI-driven cyber attacks, including deepfakes, are seen as the biggest IT resilience challenge over the next five years
- Ransomware recoveries improve: just 17% of organizations paid the ransom following a ransomware attack, with most recovering from backups.
James Watts, Managing Director at Databarracks, commented:
“This year’s findings show that resilience isn’t standing still – but neither are the threats. The rise in AI-driven attacks and the sheer volume of cyber incidents are forcing organizations to become more agile and better prepared.
“It’s encouraging to see testing now recognised as the gold standard. Nine in ten organizations tested their recovery in the last year. But we can’t afford to stop there. Recovery confidence is falling slightly, suggesting that testing is revealing gaps, not just ticking boxes. That’s the whole point – realistic testing leads to real improvement.”
Chris Butler, Resilience Director at Databarracks, added:
“There’s a clear shift happening in how organizations view resilience. The focus is no longer just IT – it’s about integrating cyber, risk, continuity, and crisis management into one coordinated approach.
“AI-driven threats are the clearest example of this. They’re not just a technical risk – they hit reputation, communications, and trust. It’s why integrated resilience is now the top priority for large and medium-sized organizations.
“The good news is that organizations are responding. In the last 12 months, three-quarters have conducted security reviews in response to threats. And ransomware responses show real progress – most victims now recover without paying, thanks to air-gapped and immutable backups.”
While large organizations are leading the way in resilience investment, the report warns that smaller firms remain more exposed – especially around planning and cyber preparedness. Bridging that gap is a key challenge for the year ahead.
The Data Health Check 2025 also highlights that more organizations are thinking long-term. AI is seen not only as a threat but a benefit – 72% of organizations believe it will strengthen security in the years ahead.
“There’s plenty to be optimistic about,” said Watts. “But resilience isn’t a destination. It’s a constant process of adapting, testing, and improving. That’s the lesson from this year’s Data Health Check – and the challenge for every business in 2025.”
