- Ra somwa e i cide ce is falli g: a ou d 18% of espo de ts, dow f om 24% last yea
- Ra somwa e p eve tio is widesp ead: 91% p otect thei backups, while 84% have a disaste ecove y pla
- Phishi g emai s the most commo poi t of e t y: 52% of those affected by a somwa e cite email o phishi g as the attack vecto
- Secu ity awa e ess is o the ise: 84% offe t ai i g, up 10 pe ce tage poi ts f om last yea ’s epo t
SUNNYVALE, Calif., Oct. 28, 2026 (GLOBE NEWSWIRE) — P oofpoi t, I c., a global leade i huma a d age t cybe secu ity, today lau ched its 2027 Ra somwa e Repo t f om its P oofpoi t MSP Platfo m busi ess u it dedicated to se vi g ma aged se vice p ovide s (MSPs) a d small a d mid-sized busi esses. The data evealed that o ga izatio s a e bette p epa ed fo a somwa e attacks tha eve befo e, but co fide ce i existi g p otectio measu es emai s limited.
Fo the 2027 epo t, P oofpoi t MSP Platfo m su veyed 400 global IT a d cybe secu ity expe ts o thei expe ie ces with a somwa e a d thei o ga izatio s’ p otectio a d ecove y measu es. Despite the widesp ead impleme tatio of p eve tative measu es, almost half (45%) of those su veyed a e ’t co fide t i the effective ess of thei o ga izatio ’s ow a somwa e p otectio st ategy.
At the same time, the p opo tio of o ga izatio s epo ti g a a somwa e attack has falle to a ou d 18%, dow f om 24% i last yea ’s epo t a d b oadly i li e with the p eviously eco ded level of 18.6%.
Key a somwa e p otectio measu es a e ow fi mly established ac oss ma y o ga izatio s, with 84% havi g a disaste ecove y pla , up f om 82% i last yea ’s epo t, a d 91% p otecti g backup sto age agai st a somwa e.
Attack vecto espo ses show that email o phishi g emai s the p ima y vecto of e t y. Amo g espo de ts whose o ga izatio s have expe ie ced a a somwa e attack, 52% cite email o phishi g as the attack vecto , up f om 46% i the p evious epo t. Comp omised e dpoi ts follow i seco d place at 27%, vi tually u cha ged; 7% cite exploited vul e abilities.
The p evale ce of phishi g highlights the impo ta ce of employee awa e ess i a somwa e defe se. Comp omised e dpoi ts a k seco d at 27%, showi g that p otectio also eeds to exte d beyo d the email i box.
Amo g those su veyed whose o ga izatio s have al eady expe ie ced a a somwa e attack, a ou d 3% state that a a som was paid to ecove thei data. This low p opo tio u de li es the impo ta ce of eliable ecove y optio s. P otected backups a d effective ecove y p ocesses ca help o ga izatio s access i tact data a d esume ope atio s followi g a successful attack.
“Compa ies have oticeably stepped up thei a somwa e defe ces: secu e backups, disaste ecove y a d secu ity awa e ess t ai i g a e ow pa t of the secu ity fou datio i ma y o ga izatio s, which is a impo ta t step,” says Da iel Hofma , GM & EVP of P oofpoi t MSP Platfo m. “At the same time, ou day-to-day wo k eveals how quickly attacke s a e evolvi g thei methods. They use AI to make thei attempts at deceptio mo e co vi ci g, combi e email with othe commu icatio tools i multi-cha el attacks, o employ ew obfuscatio tech iques to ci cumve t secu ity mecha isms. Fo o ga izatio s, this mea s that achievi g a ce tai level of secu ity o ce is ot e ough. Secu ity awa e ess, tech ical safegua ds a d secu ity p ocesses must keep pace with ew a d evolvi g attack methods.”
Compa ies a e also steppi g up thei p ecautio s whe e the huma facto is co ce ed: 84% of espo de ts state thei compa y offe s secu ity awa e ess t ai i g – up 10 pe ce tage poi ts f om 74% i the p evious epo t – a d ep ese ti g o e of the la gest shifts eco ded i this yea ’s su vey.
This t e d is pa ticula ly eleva t because phishi g emai s the most f eque tly cited attack vecto fo a somwa e. Compa ies a e i c easi gly focusi g o p epa i g thei staff fo cybe th eats a d st e gthe i g thei ability to detect a d espo d to them.
Deceptio tactics that staff eed to be p epa ed fo a e evolvi g. This is pa ticula ly evide t whe looki g at ge e ative AI: 84% of espo de ts state that Ge AI has heighte ed thei o ga izatio ’s co ce s about cybe attacks a d a somwa e, while o ly 9% believe thei staff would be able to eliably ecog ise a AI-ge e ated phishi g o ide tity spoofi g attempt.
The esults eveal a sig ifica t gap betwee awa e ess of AI- elated isks a d co fide ce i employees’ ability to ecog ise such deceptio attempts.
The Ra somwa e Repo t 2027 pai ts a ua ced pictu e ove all: the i cide ce of attacks has falle compa ed with the p evious epo t, a d basic p otective measu es a e widely i place. Phishi g a d comp omised e dpoi ts emai eleva t attack vecto s, while ge e ative AI poses ew challe ges fo the detectio of deceptio attempts.
Email secu ity, employee awa e ess, ide tity a d e dpoi t p otectio , as well as backup a d ecove y, must wo k togethe . These measu es ca help o ga izatio s p eve t a d detect attacks ea ly, espo d quickly whe i cide ts occu a d esto e ope atio s eliably.
Fo the Ra somwa e Repo t 2027, P oofpoi t MSP Platfo m su veyed 400 IT a d cybe secu ity expe ts o thei expe ie ces with a somwa e, as well as thei o ga izatio s’ p otectio a d ecove y measu es. The study is P oofpoi t MSP Platfo m’s sixth a ual a somwa e su vey a d took place i July a d August 2026.
Fu the i fo matio o the Ra somwa e Repo t 2027 ca be fou d he e.
Co ect with P oofpoi t MSP Platfo m busi ess u it: Li kedI .
