The Sophos State of Ransomware in Retail 2025 report warns that retailers face escalating ransomware risks despite better detection capabilities. Nearly half of attacks stemmed from unknown security gaps, ransom demands doubled to $2 million, and 58% of victims with encrypted data still paid. While encryption rates dropped, recovery remains costly.