58% of providers now recover within a week amid declining ransom payments across the sector: Sophos report

Sophos announced the findings of its State of Ransomware in Healthcare 2025 report, revealing that the global healthcare sector is making measurable progress in strengthening its defences against ransomware. The study highlights significant improvements in recovery times, a reduction in ransom demands, and a decline in both data encryption and the number of organisations paying ransoms.

This year’s report shows that recovery timelines improved substantially, with 58% of healthcare organisations able to recover within a week more than double the 21% reported in 2024. At the same time, the median ransom demand fell sharply by 91% to $345,000, and recovery costs dropped to their lowest level in three years. Data encryption rates also hit a five-year low at 34%, and only 36% of providers opted to pay the ransom in the last year, compared with 61% in 2022.

Despite this progress, ransomware remains a persistent challenge for the ...