Global K-12 school ransomware response improving, report finds

Sixty-seven percent of K-12 schools across 17 countries were able to avert ransomware intrusions prior to data encryption this year, compared with only 14% in 2024, with only 29% of attacks aimed at lower education institutions this year leading to encryption, reports K-12 Dive.

Meanwhile, the rate of K-12 schools disclosing total recovery within a week of ransomware incidents rose from 30% in 2024 to 50% in 2025, according to a Sophos analysis. Despite having ransomware recovery costs above other industries, schools were found to have had their average recovery expenses decline from $3.76 million to $2.28 million during the same period.

"This indicates that lower education providers are now more effective than ever at detecting and blocking ransomware attacks before they can do damage," said Sophos.

Such findings follow a State Educational Technology Directors Association report detailing insufficient state funding for education cybersecurity initiatives despite increased prioritization among state ed tech leaders.