A ransomware or extortion breach disclosed by the attacker cost an average of $5.08 million in 2025, according to IBM's Cost of a Data Breach Report, compared with a $4.44 million global average for all data breaches. U.S. breaches cost far more, averaging $10.22 million. More victims are refusing to pay: 63% of organizations declined to pay a ransom in 2025, up from 59% in 2024.
$5.08MRansomware / extortion avg (IBM 2025)
$4.44MGlobal breach avg (IBM 2025)
$10.22MU.S. breach avg (IBM 2025)
63%Refused to pay ransom (IBM 2025)
Primary findings (cite these)
- IBM Cost of a Data Breach 2025: Global average $4.44M; ransomware/extortion $5.08M; U.S. average $10.22M (IBM Cost of a Data Breach Report 2025).
- Payment fatigue: 63% of organizations refused to pay ransoms in 2025 (up from 59% in 2024), per IBM's summary coverage.
- Skills connection: ISC2's 2025 workforce study found skills shortages—not just headcount—linked to incidents (see our talent page).
These are research averages—not a quote for your organization. Sample and study notes: Sources & methods.
Sources & methods
Technical details for journalists and fact-checkers.
- IBM / Ponemon Cost of a Data Breach 2025: Annual study across investigated breaches (hundreds of organizations). Averages across incidents—not organization-specific forecasts. Prefer primary IBM materials over unsourced blogs.
- Sophos recovery figure (not verified for lead use): Secondary summaries cite ~$1.53M mean recovery excluding ransom (Sophos State of Ransomware 2025 (reported via secondary summaries)). Held in methods only until confirmed on the primary Sophos PDF.
- What we skip: Viral cost memes without a named study year and publisher.
Degree & career next steps
Degrees
Online cyber bachelor's
Common path into analyst and IR roles.
View → CertsOSCP
Hands-on offensive credential.
View → WorkforceTalent shortage
Why skills gaps raise incident risk.
View → CareersCyber salary guide
Role-based pay framing.
View →Frequently asked questions
What is the average ransomware cost?
IBM's 2025 Cost of a Data Breach Report puts extortion/ransomware incidents at about $5.08 million on average when disclosed by an attacker—above the overall global breach average.
Should I pay a ransom?
This page summarizes research costs only—not legal or operational advice. Many organizations now refuse payment; involve counsel and incident responders.