Object First-Sponsored Omdia Research: 93% of Technology Leaders Say Absolutely Immutable Backup Storage Is Critical for Ransomware Protection, But Only 16% Have It

Object First, a ransomware-proof on-premises backup storage company, published a commissioned study conducted by analyst firm Omdia that found 83% of organizations have fallen victim to a successful ransomware attack in the last 24 months.The results also show that it’s harder to recover from attacks: only 39% of organizations recovered at least 75% of their data after an attack, down from the 57% in 2024.

The survey reinforces that outages from ransomware are no longer a matter of “if,” but “when,” and that organizations are increasingly prioritizing provable recovery from absolutely immutable backup storage as the ultimate defense. According to Omdia, “Absolute Immutability means that no one can modify or delete backup data, not even the most privileged admin at an organization or an attacker with access to all IT secrets.” 93% of leaders surveyed consider Absolute Immutability as a critical backup storage requirement, yet only 16% say their current backup storage environment meets this standard, suggesting an “immutability gap” is putting organizations at increased risk.

Key Research Findings

• Technology leaders are losing ground to ransomware attackers: 83% of organizations fell victim to a successful ransomware attack in the last 24 months, up from 66% in 2024. Of those attacked, 75% experienced multiple service interruptions
• Data recoverability is declining: Only 39% recovered at least 75% of their data after an attack, down from 57% in 2024. 76% reported their largest data loss event exceeded their Recovery Point Objective (RPO) targets
• It’s taking longer to restore operations: 39% maintained a Recovery Time Objective (RTO) of five days or less, down from 49% in 2024. 64% experienced an outage that exceeded their RTO targets
• Absolute Immutability is essential for effective recovery: 83% view backup storage as the last line of defense vs. ransomware, and 93% want backup storage with Absolute Immutability, but only 16% said their backup storage meets that standard
• Vendor claims require independent proof: 89% say vendor claims of immutability cannot be taken at face value and require third-party validation before they can be trusted
• Line-of-Business and C-Suite executives want business resilience: 73% of line-of-business leaders and executives view backups with Absolute Immutability as a requirement for an effective enterprise resilience strategy

“When ransomware strikes, recovery can’t depend on backups that can still be altered, deleted, or compromised,” said David Bennett, CEO, Object First. “Omdia’s research reinforces what we hear from our customers every day: absolutely immutable backup storage is the last line of defense vs. ransomware. Organizations need confidence that even if attackers gain access to IT credentials or compromise production systems, their backup data remains protected and recoverable.”

Read the Omdia report, “Recovery Without Compromise, The Data-Backed Case for Backup Storage with Absolute Immutability,” here.