{
 "title": "Ransomware Backup Targeting Statistics 2026: The Data Study",
 "url": "https://www.servnetuk.com/research/ransomware-backup-targeting-statistics-2026",
 "publisher": "Servnet Research",
 "license": "CC BY 4.0 — free to reuse with attribution",
 "collected": "2026-09-17",
 "records": [
  {
   "metric": "Sophos backup-based recovery rate",
   "value": "66% of encrypted-data cases",
   "source": "Sophos"
  },
  {
   "metric": "Sophos year-over-year change in backup-based recovery",
   "value": "+12 percentage points versus 2025",
   "source": "Sophos"
  },
  {
   "metric": "Sophos IR/MDR identity-rooted incidents",
   "value": "67% of investigated incidents",
   "source": "Sophos"
  },
  {
   "metric": "Sophos ransomware originating from compromised identities",
   "value": "79% of attacks",
   "source": "Sophos"
  },
  {
   "metric": "Veeam ransomware-hit respondents fully recovered",
   "value": "28% fully recovered all affected data",
   "source": "Veeam"
  },
  {
   "metric": "Veeam ransomware-hit respondents with partial recovery",
   "value": "44% recovered less than 75% of affected data",
   "source": "Veeam"
  },
  {
   "metric": "Veeam ransomware-hit respondents with encryption or exfiltration",
   "value": "56%",
   "source": "Veeam"
  },
  {
   "metric": "Veeam 2024-source backup targeting summary in secondary coverage",
   "value": "96% targeted backup repositories",
   "source": "CNIC Solutions"
  },
  {
   "metric": "Veeam 2024-source backup compromise summary in secondary coverage",
   "value": "76% of targeting attempts successfully compromised backups",
   "source": "CNIC Solutions"
  },
  {
   "metric": "Sophos backup use for restoration",
   "value": "54% used backups to restore data in 2025",
   "source": "Sophos"
  },
  {
   "metric": "Sophos unpatched-vulnerability share of incidents",
   "value": "32%",
   "source": "Sophos"
  },
  {
   "metric": "Sophos backup compromise rate in weak-defence cases",
   "value": "75%",
   "source": "Sophos"
  },
  {
   "metric": "Sophos backup-compromise cost comparison",
   "value": "$3 million vs $375,000",
   "source": "Sophos"
  }
 ]
}