Organizations That Delay Responding to Email Breaches are 79% More Likely to Suffer a Ransomware Hit

News highlights:

• New research shows 78% of respondents experienced an email security breach in the previous 12 months
• The average cost of recovering from a single email security breach exceeds $200,000
• Smaller companies are hit hardest with recovery costs of nearly $2,000 per employee

CAMPBELL, Calif., Oct. 28, 2025 /PRNewswire/ -- Barracuda Networks, Inc., a leading cybersecurity company providing complete protection against complex threats for all size business, has released new research showing that organizations taking longer than nine hours to address an email security breach have a 79% chance of also being a victim of ransomware. The new Email Security Breach Report 2025 found that most of the organizations surveyed (78%) experienced an email breach in the previous 12 months, with the average cost to recover reaching $217,068.

Smaller businesses are hit especially hard. Companies with 50 to 100 employees incur costs of on average $1,946 per person, while larger organizations with 1,000 to 2,000 staff see average costs of $243 per employee.

The survey also shows that despite the need for rapid incident detection and response; many companies struggle to achieve this. Respondents cite the increased complexity of email threats, skills shortages and the lack of automated incident response as obstacles that make it difficult to quickly identify and remove threats.

The report is based on the findings of an international survey undertaken by Barracuda with Vanson Bourne, gathering insights from 2,000 IT and security decision-makers across North America, Europe and Asia-Pacific.

Key Findings

• 78% of organizations experienced an email security breach in the previous 12 months
• 71% of organizations that experienced an email security breach were also hit with ransomware during the year
• 41% suffered reputational damage, and many lost new business opportunities, harming growth
• $217,068 is the average cost of responding to and recovering from an email security breach
• Only 50% detected the breach within an hour
• Organizations taking 9 hours or more to fix the breach have a 79% chance of also being hit with ransomware
• 47% say advanced evasion techniques are the main obstacle to rapid incident response
• 44% say the lack of automated incident response delays the detection, containment and removal of threats

"Email security is no longer just about stopping spam or mass phishing — it's about preventing the first domino from falling in a cyberthreat chain that could end in operational paralysis, data loss, reputational damage and longer-term business impacts," said Neal Bradbury, chief product officer at Barracuda. "Responding quickly and effectively to email breaches is critical to overall cyber resilience. This can be a challenge for many organizations. The findings show that the ability to detect and neutralize email incidents is often hampered by increasingly complex and evasive attacks, internal skills shortages, a lack of automation, and more.  A unified approach to protection centered on a strong integrated security platform is vital."

Methodology 

Barracuda commissioned independent market research company Vanson Bourne to conduct a global survey of 2,000 senior security decision-makers in IT and business roles in organizations with between 50 and 2,000 employees from a broad range of industries in the U.S., UK, France, DACH (Germany, Austria, Switzerland), Benelux (Belgium, the Netherlands, Luxembourg), the Nordics (Denmark, Finland, Norway, Sweden), Australia, India, and Japan. The fieldwork was conducted in April and May 2025.

About Barracuda
Barracuda is a leading global cybersecurity company providing complete protection against complex threats for all size business. Our AI-powered BarracudaONE platform secures email, data, applications, and networks with innovative solutions, managed XDR and a centralized dashboard to maximize protection and strengthen cyber resilience. Trusted by hundreds of thousands of IT professionals and managed service providers worldwide, Barracuda delivers powerful defenses that are easy to buy, deploy and use.

Barracuda Networks, Barracuda, BarracudaONE, and the Barracuda Networks logo are registered trademarks or trademarks of Barracuda Networks, Inc. in the U.S., and other countries.

Contact:
Anne Campbell
Barracuda Networks, Inc.
978-328-1642
[email protected]    

SOURCE Barracuda Networks, Inc.