Sophos releases 2025 ransomware report for manufacturing sector 

 
Sophos, a global leader of innovative security solutions for defeating cyberattacks, announced new findings from the Sophos State of Ransomware in Manufactu-ring and Production 2025 report. The report is based on an independent survey of 332 manufacturing organizations that were hit by ransomware in the last year, says a press release. The report reveals that ransomware attacks on manufacturers are now less focused on data encryption. Instead, attackers are increasingly stealing data and using it to extort victims. In many cases, even when systems are encrypted, data is also stolen, which doubles the impact on organizations. Although more companies are able to stop attacks before files are locked, more than half of those that do get encrypted still end up paying ransoms close to the original amount demanded.
At the same time, recovery costs and timelines are improving, with average restoration expenses falling. Most organizations now recover fully within about a week, even without counting ransom payments. Yet, manufacturers still point to internal weaknesses, limited in-house expertise, unknown security gaps.