Education Sector Sees Stable Ransomware Rates Amid Growing Third-Party Risks
Ransomware Attacks in Education: A Closer Look
Ransomware incidents climbed by 32% globally in 2025, but the education sector experienced only a slight increase of 2%. This stabilization highlights a potential shift in hacker focus, though educational institutions still need to remain vigilant. The average ransom demanded across industries decreased, with schools seeing a significant 34% drop. This may be due to improved cybersecurity awareness and practices.
Globally, Comparitech recorded 7,419 ransomware incidents in 2025, a significant jump from 5,631 the previous year. These attacks affected various sectors differently:
- Businesses: 6,292 incidents (up 35%)
- Government: 374 incidents (up 27%)
- Healthcare: 444 incidents (up 2%)
- Education: 252 incidents (up 2%)
The reduced rate in education might be linked to hackers’ growing interest in manufacturing and increased cybersecurity awareness following past breaches.
Ransom Demands & Third-Party Concerns
The average ransom demand fell to $1.04 million in 2025. In education, it dropped to $456,200, reflecting a proactive approach to security. Still, nearly half of the affected organizations chose to pay the ransom.
Rebecca Moody from Comparitech highlighted the persistent threat of ransomware, particularly through third-party vulnerabilities. These weak points can give hackers access to multiple organizations, risking substantial data breaches. Incidents like the attack on Collins Aerospace underline the importance of robust third-party risk management.
To secure their systems, organizations need to ensure regular backups, timely updates, and thorough evaluations of their third-party partnerships.
For more insights, visit Comparitech’s full report.
Qsentinel: Stay informed and protect your digital assets. Sign up for our alerts today!
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more

