2025 Ransomware Holiday Risk Report

The Balancing Act: Risk vs Resilience A proactive approach to identity threats can help leaders weigh ransomware risk against staffing and resource concerns. Building business resilience requires an often complex calculation of cyber threat risk and a balance between mitigating that risk, conserving resources, and retaining security personnel. Understanding when ransomware is most likely to strike and how attackers seek to infiltrate your environment is an important factor in the success of these efforts. The 2025 Ransomware Holiday Risk Report analyzes responses from 10 countries and 8 industry sectors across North America, Europe, the United Kingdom, and Asia Pacific, gathered in partnership with international research firm Censuswide. The report offers insight into ransomware attack behavior and defense trends and recommends steps that organizations can take to strengthen their cybersecurity preparedness. Share these findings with your IT, security, and business stakeholders, and leverage the expert insights to improve your cyber crisis response planning.  

“Threat actors continue to take advantage of reduced cybersecurity staffing on holidays and weekends to launch ransomware attacks. Vigilance during these times is more critical than ever because the persistence and patience attackers have can lead to long lasting business disruptions,” said Chris Inglis, the first U.S. National Cyber Director and Semperis Strategic Advisor. “In addition, corporate material events such as mergers and acquisitions often create distractions and ambiguity in governance and accountability—exactly the environment ransomware groups thrive on.”

Check out the report to find out more!