The State of Ransomware in Education 2025

Welcome to the fifth edition of the Sophos State of Ransomware in Education report, exploring how ransomware is impacting both lower and higher education institutions in 2025. Based on insights from 441 IT and cybersecurity leaders, this year’s report highlights how attacks are evolving, why schools are being targeted, and the real human and operational impact on education providers. Together, these findings offer a clear, real-world view of the challenges facing the education sector today.