11/05/2026
The average ransomware payment in 2025 was $1.5M.
But the payment isn't the expensive part.
The expensive part is the 21 days of downtime. The client notifications. The legal fees. The regulatory fines. The reputation damage. The staff who can't work. The projects that miss deadlines. The revenue that stops.
Total cost of a ransomware incident for a mid-size organisation: £2.4M on average.
And 86% of UK organisations have no incident response plan.
That means when it happens — not if, when — they're making £2.4M worth of decisions in real time, under pressure, with no process.
4 hours of planning now prevents 21 days of chaos later.
We build incident response plans.
DM 'IRP' and I'll send you our template.
