---
description: "Omdia ransomware study for Object First finds recovery rates falling: 83% of organizations hit in 24 months, immutability the gap."
title: Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage
image: https://www.storagereview.com/wp-content/uploads/2025/07/StorageReview-ObjectFirst-432TB-6.jpg
---

[![Storage Review]()](https://storagereview.com/)

---

[Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview)

[Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview)

[![StorageReview.com](https://www.storagereview.com/wp-content/uploads/2026/07/Storage-Review-2x.png)](https://www.storagereview.com)

≡ Menu

- [Home](https://www.storagereview.com/)
- [Storage Reviews](https://www.storagereview.com/review)
  - [Consumer Reviews](https://www.storagereview.com/consumer)
  - [Enterprise Reviews](https://www.storagereview.com/enterprise)
  - [Ubiquiti Reviews](https://www.storagereview.com/best/ubiquiti-reviews)
- [SR Merch](https://store.storagereview.com)
- [Leaderboards](https://www.storagereview.com/best)
  - [Best Storage Arrays](https://www.storagereview.com/best/storage-arrays)
  - [Best Enterprise SSDs](https://www.storagereview.com/best/enterprise-ssds)
  - [Best Servers](https://www.storagereview.com/best/servers)
  - [Best Desktops for Local AI](https://www.storagereview.com/best/desktops-local-ai)
  - [Best Laptops for Local AI](https://www.storagereview.com/best/laptops-local-ai)
  - [Best Local LLM Tools](https://www.storagereview.com/best/local-llm-tools)
  - [Agentic AI Hardware](https://www.storagereview.com/best/agentic-ai-hardware)
  - [Best SSDs & Hard Drives](https://www.storagereview.com/best_drives)
  - [Best Portable SSDs](https://www.storagereview.com/best/portable-ssds)
  - [Best Business Laptops](https://www.storagereview.com/best/business-laptops)
  - [Best Mobile Workstations](https://www.storagereview.com/best/mobile-workstations)
  - [Best Desktop Workstations](https://www.storagereview.com/best/desktop-workstations)
  - [Best Laptop Battery Life](https://www.storagereview.com/best/laptop-battery-life)
- [Storage Reference Guide](https://www.storagereview.com/storage-reference-guide)
- [About SR](https://www.storagereview.com/about-storagereview)
  - [StorageReview.com Sweepstakes Rules and Regulations](https://www.storagereview.com/storagereview-com-sweepstakes-rules-and-regulations)

Search

[Home](https://www.storagereview.com/) » [News](https://www.storagereview.com/news) » Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage

# Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage

by Harold Fritts on September 1, 2026

[Data Protection](https://www.storagereview.com/enterprise/data-protection)  ◇  [Enterprise](https://www.storagereview.com/enterprise)

A recent study by the analyst firm Omdia, commissioned by [Object First](https://www.storagereview.com/news/veeam-acquires-object-first-a-software-giant-steps-into-appliances), reveals that enterprise ransomware recovery rates are declining despite growing awareness of modern data protection strategies. According to the research, 83 percent of surveyed organizations experienced a successful ransomware attack in the past 24 months, up from 66 percent in 2024. Among those affected, 75 percent suffered multiple service interruptions.

![Front bezel of an Object First Ootbi backup appliance in the StorageReview lab](https://www.storagereview.com/wp-content/uploads/2025/07/StorageReview-ObjectFirst-432TB-5.jpg)

The report emphasizes a critical decline in data recoverability following an incident. Only 39 percent of impacted organizations managed to restore at least 75 percent of their compromised data, down from 57 percent in 2024. Furthermore, 76 percent of respondents reported that their most significant data loss event breached established Recovery Point Objective (RPO) targets. Operational recovery timelines have similarly stretched, with only 39 percent maintaining a Recovery Time Objective (RTO) of five days or less, down from 49 percent in the previous survey period, and 64 percent experiencing outages that exceeded their overall RTO thresholds.

## The Immutability Implementation Deficit

The findings identify an architectural mismatch between perceived security posture and actual storage protection. Omdia defines absolute immutability as a state in which backup data cannot be altered or deleted by any entity, including internal administrative accounts with elevated privileges or adversaries possessing compromised root credentials.

While 83 percent of enterprise IT leaders view backup storage as the final defense mechanism against ransomware payloads and 93 percent identify absolute immutability as an essential architectural requirement, only 16 percent confirm their existing storage environments meet this standard. This disparity leaves secondary storage targets vulnerable to credential stuffing, privilege escalation, and direct tampering with the storage layer during an intrusion.

Compounding this deployment gap is growing skepticism about storage vendors’ specifications. The data indicates that 89 percent of respondents require independent, third-party validation before accepting vendor claims regarding storage immutability. Meanwhile, enterprise leadership consensus continues to shift toward storage resilience, with 73 percent of executive stakeholders citing validated immutable backup infrastructure as a core requirement for overall business continuity planning.

## Industry Perspective on Secondary Storage Resilience

Analyst commentary from Omdia notes that modern ransomware threat actors actively target recovery infrastructure to compel ransom payments. Analysts note that while the storage industry broadly markets immutable capabilities, enterprise configurations often fall short of true administrative isolation, leaving snapshots and object repositories susceptible to deletion.

Object First leadership underscored that standard backup architectures remain vulnerable when administrative credentials are compromised. To ensure deterministic recovery timelines, enterprise backup architectures require out-of-band controls and hardened, zero-trust storage tiers that prevent modification regardless of root access levels within the production environment.

**Engage with StorageReview**

[Newsletter](https://www.storagereview.com/storage_newsletter) |  [YouTube](https://www.youtube.com/user/StorageReview "Opens in a new window") | Podcast  [iTunes](https://podcasts.apple.com/gb/podcast/storagereview-com-storage-reviews/id1060681115 "Opens in a new window")/ [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0 "Opens in a new window") |  [Instagram](https://www.instagram.com/storagereview/ "Opens in a new window") |  [Twitter](https://twitter.com/storagereview "Opens in a new window") |  [TikTok](https://www.tiktok.com/@storagereview? "Opens in a new window") |  [RSS Feed](https://www.storagereview.com/rss.xml)

![]()

### Harold Fritts

I have been in the tech industry since IBM created Selectric. My background, though, is writing. So I decided to get out of the pre-sales biz and return to my roots, doing a bit of writing but still being involved in technology.

Previous post: [VAST Data CrowdStrike Integration Goes Live: Native Falcon Sensor Now, Next-Gen SIEM and AIDR in Preview](https://www.storagereview.com/news/vast-data-crowdstrike-integration-goes-live-native-falcon-sensor-now-next-gen-siem-and-aidr-in-preview)

Next post: [On the Ground at VMware Explore 2026: How Lenovo Is Partnering with VMware for Turnkey AI and Taming the Memory Crunch](https://www.storagereview.com/news/on-the-ground-at-vmware-explore-2026-how-lenovo-is-partnering-with-vmware-for-turnkey-ai-and-taming-the-memory-crunch)

Trusted Vendors

Products and solutions from our affiliate partners:

- [  
  ![Ubiquiti Logo](https://www.storagereview.com/wp-content/uploads/2024/11/2-1.webp)  
   Ubiquiti](https://store.ui.com/us/en?a_aid=StorageReview "Opens in a new window")
- [  
  ![Newegg Logo](https://www.storagereview.com/wp-content/uploads/2025/11/newegg.webp)  
   Newegg](https://click.linksynergy.com/fs-bin/click?id=g5terNMDhz0&offerid=1207190.18&subid=0&type=4 "Opens in a new window")
- [  
  ![Amazon Logo](https://www.storagereview.com/wp-content/uploads/2025/11/amazon.webp) Amazon](https://amzn.to/4fLJUEW "Opens in a new window")

Newsletter

Subscribe to the StorageReview newsletter to stay up to date on the latest news and reviews. We promise no spam!

1  

Leave this field empty if you’re human:

## Advertisement

Content Categories

[Facebook](https://www.facebook.com/@storagereview) [X](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview)

Copyright © 1998-2025 Flying Pig Ventures, LLC Cincinnati, Ohio. All rights reserved.

Manage your privacy

To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site and show (non-) personalized ads. Not consenting or withdrawing consent, may adversely affect certain features and functions.

Click below to consent to the above or make granular choices. Your choices will be applied to this site only. You can change your settings at any time, including withdrawing your consent, by using the toggles on the Cookie Policy, or by clicking on the manage consent button at the bottom of the screen.

Functional Functional Always active

The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.

Preferences Preferences

The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.

Statistics Statistics

The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.

Marketing Marketing

The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.

Statistics

Marketing

Features

Always active

Always active

- Manage options
- Manage services
- Manage {vendor\_count} vendors
- [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/)

Accept Deny Manage options Save preferences Manage options

- {title}
- {title}
- {title}

Manage your privacy

To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.

Functional Functional Always active

The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.

Preferences Preferences

The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.

Statistics Statistics

The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.

Marketing Marketing

The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.

Statistics

Marketing

Features

Always active

Always active

- Manage options
- Manage services
- Manage {vendor\_count} vendors
- [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/)

Accept Deny Manage options Save preferences Manage options

- {title}
- {title}
- {title}

Manage consent Manage consent

```json
{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage","url":"https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage","name":"Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage - StorageReview.com","isPartOf":{"@id":"https:\/\/www.storagereview.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage#primaryimage"},"image":{"@id":"https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage#primaryimage"},"thumbnailUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2025\/07\/StorageReview-ObjectFirst-432TB-6.jpg","datePublished":"2026-09-01T15:42:11+00:00","dateModified":"2026-09-01T15:56:02+00:00","description":"Omdia ransomware study for Object First finds recovery rates falling: 83% of organizations hit in 24 months, immutability the gap.","breadcrumb":{"@id":"https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage#primaryimage","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2025\/07\/StorageReview-ObjectFirst-432TB-6.jpg","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2025\/07\/StorageReview-ObjectFirst-432TB-6.jpg","width":1500,"height":1056},{"@type":"BreadcrumbList","@id":"https:\/\/www.storagereview.com\/news\/omdia-study-highlights-declining-ransomware-recovery-rates-and-the-immutability-gap-in-backup-storage#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.storagereview.com\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/www.storagereview.com\/news"},{"@type":"ListItem","position":3,"name":"Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage"}]},{"@type":"WebSite","@id":"https:\/\/www.storagereview.com\/#website","url":"https:\/\/www.storagereview.com\/","name":"StorageReview.com","description":"StorageReview.com is a leading provider of news and reviews throughout the entire IT stack - from the datacenter to the edge, and all points in between.","publisher":{"@id":"https:\/\/www.storagereview.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.storagereview.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.storagereview.com\/#organization","name":"StorageReview.com","url":"https:\/\/www.storagereview.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","width":344,"height":61,"caption":"StorageReview.com"},"image":{"@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/storagereview","http:\/\/youtube.com\/user\/storagereview"]}]}
```
