2025 Cyber Incident Insights Report 

Navigate cyber risk in 2025 with insights from our latest report

S-RM Cyber Incident Insights Report 2025 Cover Image

S-RM's 2025 Cyber Incident Insights Report analyzes 600+ incidents our global team responded to in 2024.

 

We reveal key incident trends, critical changes in the wider threat landscape, and share our predictions and recommendations for the year ahead. 

 

The S-RM incident data presented in this report is from Polus Analytics, our proprietary incident management software.

The evolving threat landscape: How does the rise in the number of cyber threat actors and their varied tactics impact your organization's approach to cyber risk?

Trends in cyber resilience: Should the decline in ransom payments change your company's strategy towards cyberattacks?

Technical controls and recommended actions: Are you effectively implementing security practices and technology such as Multi-Factor Authentication (MFA) and Endpoint Detection and Response (EDR)? 

Looking ahead to 2025: How will regulatory changes and the growing influence of AI in cybercrime impact your cyber strategy?

2024 incidents in numbers

0%

year-on-year increase in separate threat actors encountered

0%

of ransomware cases were due to software vulnerabilities or lack of MFA

0%

increase in the number of small businesses named on ransomware leak sites

0%

of Business Email Compromise (BEC) victims had not rolled out MFA fully to all users

0%

of ransomware cases resulted in payment to a threat actor, down from 28% in 2022

0%

of ransomware victims had viable backups in place, an increase of 26% since 2022

0%

of ransomware victims never appeared on extortion leak sites

0%

of BEC cases involved the use of Adversary in the Middle techniques

Download the report