Ransomware recovery costs South African businesses R24 million on average, report finds
Image: Pixabay
A new cybersecurity report from Sophos has revealed a sharp rise in the number of South African organisations paying ransoms to cybercriminals, with average recovery costs now at R24 million. The State of Ransomware in South Africa 2025 report is based on responses from 154 local businesses that were hit by ransomware in the last year.
South African organisations fell victim to ransomware due to compromised credentials used in 34% of attacks. Another reason was exploited vulnerabilities, which were the start of 28% of attacks. Malicious emails were used in 22% of attacks.
A lack of expertise was the most common operational root cause, cited by 58% of South African respondents. This was followed by a lack of protection cited by 55% of organisations. 53% said that a weakness in their defenses that they were not aware of played a factor in their organisation falling victim to ransomware.
The report shows that 71% of organisations paid the ransom to recover their encrypted data - a dramatic increase from just 43% in 2024. Meanwhile, fewer businesses are using backups to recover, with that number dropping from 72% to just 35% in the past year.
According to Pieter Nel, Country Manager for Sophos South Africa, this is a worrying shift. 'The fact that more South African organisations are choosing to pay ransoms - while relying less on backups - shows that many are not adequately prepared for cyberattacks. It's critical that we change this trajectory by investing in stronger defences and better recovery planning.'
The report also found that the median ransom demand is now R18m – up from R2.8m last year. However, the median ransom paid rose to R8.3m, nearly three times more than in 2024.
Meanwhile, South African organisations are getting faster at recovering from a ransomware attack, with 47% fully recovered in up to a week, an increase from the 41% reportedlast year. 19% took between one and six months to recover, a drop from last year's 26%.
On top of the financial damage, the human impact was also significant. Among organisations where data was encrypted 76% of IT teams felt increased pressure from leadership; 47% reported higher levels of anxiety and stress and 42% experienced a sustained increase in workload.
Sophos is encouraging all businesses, large or small, to strengthen their cyber resilience by using strong passwords and enabling multi-factor authentication; keeping systems up to date and patched; making regular backups and testing recovery plans and educating employees about common scams as well as considering professional cybersecurity support like Managed Detection and Response (MDR) services.
'Ransomware doesn't only target big corporations - it affects schools, small businesses, and even healthcare providers,' says Nel. 'It's more important than ever that all South Africans, whether consumers or business owners, take cybersecurity seriously.'
BUSINESS REPORT

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


The Citizen
4 hours ago
- The Citizen
Weekly economic wrap: politics dominate, lower inflation expectations
Between fears of how the economy will react to the DA-ANC tensions and the US' new bill and tariffs, inflation expectations decreased. Politics dominated the economic news this week, with local and global politics taking centre stage, while a South African survey on inflation expectations had good news for consumers from all the groups surveyed. Lisette IJssel de Schepper, chief economist at the Bureau for Economic Research (BER) points out that while tensions persisted in South Africa between the DA and ANC, international headlines were dominated by the passage of the 'Big Beautiful Bill' in the US and the fast-approaching US tariff deadline. Bianca Botes, director at Citadel Global, says gold gained, while oil slipped as fiscal and trade risks weigh on commodities. 'Gold advanced to around $3,330/ounce, maintaining a solid position due to lingering uncertainty, even in an improved-sentiment environment. 'The US Tax-and-Spending bill's anticipated $3.3 trillion-plus impact on the deficit, along with the risk of new tariffs, bolstered gold's appeal.' ALSO READ: Policy Uncertainty Index drops slightly while global and local uncertainty remain Oil markets and the rand trending lower She says oil markets, on the other hand, are trending lower, with Brent Crude falling to approximately $68.50/barrel. 'Market sentiment was shaped by speculation that the expanded Organization of the Petroleum Exporting Countries (OPEC+) may increase output at its upcoming meeting, adding to downward pressure. 'Nonetheless, medium-term forecasts remain positive, with some analysts expecting higher average prices in 2025 due to persistent supply constraints outside OPEC and steady demand growth. However, geopolitical factors remain in play, particularly US sanctions on Iran, which added a layer of uncertainty to the global supply picture.' The rand kept surprising economists, strengthening to around R17.50/$, its strongest level since late 2024, supported by a declining dollar, elevated gold prices and improving local political sentiment. 'While the rally has been encouraging, the rand's outlook remains sensitive to both domestic developments and broader commodity market dynamics.' Busisiwe Nkonki and Isaac Matshego, economists at the Nedbank Group Economic Unit, say the rand was buoyed by higher global risk appetite this week, firming to its strongest level since the second week of November, trading at R17.60 on Friday afternoon. ALSO READ: Inflation expectations almost at four-year low Inflation expectations looking good De Schepper says according to the BER's inflation expectations survey, expectations declined across the board in the second quarter, with the inflation expectations of all three social groups, (businesspeople, trade union representatives and analysts) decreasing, with the downward adjustment extending across the forecast horizon. On average, the respondents expect that headline consumer inflation will be 3.9% during 2025, then rise gradually to 4.3% in 2026 and 4.5% in 2027. The inflation expectations of households for the next 12 months decreased to 5.4%, from 5.7% before. This is the lowest rate since the fourth quarter of 2021. 'The moderation in expectations not only firms up the likelihood of a 25 basis points rate cut in July but should also support the South African Reserve Bank's (Sarb) desire to shift to a lower inflation target. Mamello Matikinca-Ngwenya, Siphamandla Mkhwanazi, Thanda Sithole and Koketso Mano, economists at FNB, say the household experience of inflation is determined by spending patterns. 'While lower-income households will be more affected by food, higher-income households will be more sensitive to transport and insurance costs. That said, higher household expectations reflect the nuances beyond headline inflation readings. 'This is a dynamic that will also affect how quickly the Sarb is able to efficiently and sustainably achieve a lower inflation objective. High administered inflation may need to be compensated for by further non-admin core disinflation, which suggests less monetary policy easing. That said, the efficacy gains from a credible central bank and effective communication cannot be overlooked.' ALSO READ: Absa PMI increases but in contractionary territory for eighth consecutive month PMIs a mixed bag again The Absa Purchasing Managers' Index (PMI) increased by 5.4 points in June to reach 48.5, the second-highest reading this year and the largest monthly increase since September 2024, although it remains below the neutral 50 points. The S&P Global PMI, on the other hand, decreased by 0.7 points to 50.1 in June. While it remains in expansionary terrain, the underlying data showed output and new business declines, De Schepper points out. Furthermore, she says, the forward-looking confidence index slipped to its lowest level in four years. 'The divergence between this index and the Absa PMI could reflect survey timing: the Absa survey was conducted after the end of the 12-day war between Isreal and Iran and amid a lull in global tariff news, while the S&P survey was fielded during the final two weeks of the month and likely captured more of the lingering uncertainty.' Matikinca-Ngwenya, Mkhwanazi, Sithole and Mano say the good news in the Absa PMI is that new sales orders surged by 7.8 points, driven mainly by domestic demand. 'Despite stronger demand, production declined slightly, and supplier delivery times lengthened, likely due to increased activity rather than supply issues.' ALSO READ: New vehicle sales finish first half of 2025 on a noteworthy high New car sales keep increasing Naamsa reported that new vehicle sales increased by 18.7%, slightly down from 22% in May, with sales increasing for a fourth consecutive quarter. Exports also bounced back with 7.9% growth from a 14.6% contraction in May. Nkonki and Matshego say new vehicle sales surprised on the upside in June, much higher than their forecast of 14.3%. They noted that imported models outperformed those produced by local OEM's, reflecting heightened price sensitivity among consumers given still-tight household budgets. 'The broader recovery in vehicle sales is supported by subdued inflation, better credit conditions and the 100-bps drop in interest rates. However, the outlook is tempered by soft business confidence and lingering uncertainty around trade policy. Still, the industry should benefit from a more supportive macroeconomic backdrop heading into the second half of the year.'


The South African
4 hours ago
- The South African
Vodacom Bulls: Jake White out, Johan Ackermann in?
The Vodacom Bulls and Director of Rugby Jake White parted ways on Friday, with Johan Ackermann emerging as the frontrunner to succeed the former Springbok World Cup-winning coach. According to Rapport , Ackermann, the former Lions coach, is favoured to take over in the coming weeks. He is currently serving as a consultant with the Junior Boks and is expected to work with the team until the conclusion of the U20 Rugby Championship. Reports surfaced earlier this week indicating that Ackermann, who shares a strong relationship with Bulls CEO Edgar Rathbone, is likely to replace White. On Friday afternoon, the Vodacom Bulls and Jake White released a joint statement regarding their separation. 'With many years' coaching experience, I felt it would be difficult to get the squad to perform to the next level. Therefore, in the best interest of both myself and the Bulls, I feel it's time for a new chapter. It's time for this group to have a new voice,' the statement read. 'I have enjoyed my time in Pretoria. I met some wonderful friends. I believe that rugby is like life – you win some you lose some. You learn as you grow. You need to be strong and courageous and, most importantly, it isn't always fair. 'I would like to thank all the loyal supporters, the Bulls staff that worked tirelessly, and to the players for their hard work and dedication. I wish BBRU president Willem Strauss and the amateur game lots of success in the future. To the shareholders, I will always be grateful for all the support and financial backing they gave, far and beyond any other club' 'Thank you for the privilege. To the Board for their support and CEO, Edgar Rathbone, coaches and management, it was great to be part of this winning culture. To be part of Bulls rugby history has been an absolute honour. I wish Bulls rugby all the best. Hou die blou bo!' Under Jake White, the franchise reached three consecutive United Rugby Championship (URC) finals but lost all of them. Let us know by leaving a comment below, or send a WhatsApp to 060 011 0211. Subscribe to The South African website's newsletters and follow us on WhatsApp, Facebook, X and Bluesky for the latest news.


The South African
4 hours ago
- The South African
Egypt and Sudan push back as Ethiopia finishes Nile dam
Prime Minister Abiy Ahmed announced the completion of the Nile dam project, the Grand Ethiopian Renaissance Dam (GERD), during a parliamentary address on 3 July 2025. The GERD began construction in 2011 with a $4 billion (about R73.6 billion) budget. It is the largest hydroelectric project in Africa, measuring 1.8 km in width and 145 metres in height. Furthermore, the Nile dam is expected to generate more than 5 000 megawatts of electricity when it opens in September, according to Abiy. In February 2022, electricity generation began, and two turbines are now producing electricity. The dam is located 30 kilometres from Sudan's border, in Ethiopia's northwest region. Sudan and Egypt reiterated their opposition to the GERD's unilateral completion without a formal agreement. As a result of the Grand Ethiopian Renaissance Dam (GERD), 97% of Egypt's water comes from the Nile, and the country is concerned about its access being reduced. Moreover, Sudan voiced concerns about the security of its dams and water infrastructure downstream. More than a decade of intense negotiations has not yielded a trilateral agreement. Sudan's Sovereign Council General Chairman Abdel Fattah al-Burhan and Egyptian President Abdel Fattah el-Sisi both denounced unilateral actions in the Blue Nile Basin on 30 June. Both leaders reaffirmed their commitment to regional legal frameworks and water security. 'The GERD is a collective opportunity, not a threat to neighbouring countries,' Abiy Ahmed emphasised. He declared that Ethiopia is willing to discuss water-related issues with Egypt and Sudan in a positive manner. Ethiopia's advancement would not come at the expense of others, Abiy reaffirmed. Across the Nile basin, he promoted 'collective advancement, collective energy, and collective water'. Ethiopia claims that economic growth and electrification depend on the Grand Ethiopian Renaissance Dam. Half of Ethiopia's population does not have access to electricity, according to World Bank data. Egypt announced the cessation of negotiations in December 2023 as a result of Ethiopia's unilateral acts. Sudan continues to be unstable due to persistent civil strife and fluctuating political alignments. The African Union (AU) has advocated for fresh engagement; nevertheless, official mediation has not recommenced. International experts caution about rising tensions in the absence of a formal water-sharing mechanism. Ethiopia asserts that it does not need external approval to construct infrastructure within its borders. The GERD symbolises national pride and regional conflict in East Africa. Let us know by leaving a comment below, or send a WhatsApp to 060 011 021 11. Subscribe to The South African website's newsletters and follow us on WhatsApp, Facebook, X and Bluesky for the latest news