Apricorn, the leading manufacturer of software-free, 256-bit AES XTS hardware-encrypted USB data storage devices, today announced further findings from its 2025 annual survey of IT security decision makers into encryption policies and protocols. The survey revealed that encryption has become a critical asset in data protection, with 94 per cent[1] of surveyed IT decision makers noting an increase in implementation over the past year.
Just under three in five (59%) of IT security decision makers said encryption has increased, allowing them to better protect their data, including on lost/stolen devices. Another key driver behind the uptick in the use of encryption is the continued prevalence of remote and hybrid working. Twenty-six per cent of organisations cited this as a primary reason for implementing encryption, up from 20 per cent in 2024.
As sensitive data continues to move beyond the traditional perimeter, securing endpoints and remote access points has become essential. This has spurred the wider adoption of encryption, compounded by the fact that 11 per cent of those surveyed said they did not know which data sets to encrypt. They noted this was one of the biggest problems associated with implementing a cyber security plan for remote/mobile working.
Interestingly, fewer organisations are now using encryption specifically to protect against ransomware, down to just 10 per cent in 2025 from 12 per cent in 2024 and 17 per cent in 2023. This may reflect a shift in mindset, with ransomware attacks becoming more sophisticated and often unavoidable. Instead, the focus has moved toward ensuring the recovery of data through protected backups, rather than solely trying to prevent and protect against initial compromise.
Overall, the results indicate a growing maturity in the adoption of encryption, with 94 per cent[2] of organisations now having a defined data encryption strategy or policy for removable media, the same as in 2024. Whilst software encryption has grown, the importance of hardware encryption remains a priority with 34 per cent highlighting that they only allow the use of hardware encrypted organisation-approved removable media. This demonstrates that businesses are recognising that hardware encryption helps mitigate the risk of unauthorised access if a device is lost or stolen, particularly in environments where removable media is more vulnerable to physical compromise.
Jon Fielding, Managing Director, EMEA, Apricorn, commented: “Encryption is only as effective as its execution. While it’s encouraging to see more organisations adopt a strategic approach, policies that sit on paper won’t protect data. Until encryption becomes an embedded, standardised part of all data handling, especially at the endpoint, businesses will continue to face unnecessary risk.”
In response to where encryption is most commonly applied, 64 per cent said they encrypt all laptops and desktops compared with 58 per cent and 55% in 2024. Encryption of portable media such as USB drives and hard drives has also risen from previous years, with all USB drives now encrypted by 54 per cent and 63 per cent now encrypt all portable hard drives. This figure is now at its highest since 2020, having increased from 54 per cent in 2024, and just 4 per cent in 2023.
However, organisations are signalling a strong intent to expand encryption across a range of device types. Many expect to apply encryption on mobile devices (38%), although this could be due to a dip in previous years, when the number of respondents stating they encrypt all mobile devices dropped to 43 per cent from 50 per cent in 2024. Removable media also remains a key focus, with 27 per cent of respondents planning to increase encryption usage on USB sticks and 25 per cent on portable hard drives.
This targeted investment reflects a growing awareness of the risks associated with portable storage and endpoint data loss, areas frequently exploited in breaches and compliance failures. In fact, a lack of encryption was also cited by 24 per cent of IT security decision makers as being the main reason for a data breach within their organisation.
For laptops, 26 per cent plan to up their encryption, and 24 per cent expect to increase encryption across desktops. The findings also indicate a shift from reactive to preventative security postures, particularly as remote work, BYOD policies and hybrid infrastructures persist.
“With sensitive data frequently moving across multiple environments, encrypting endpoints such as laptops and removable media is critical to reducing the risk of exposure. These year-on-year increases underscore that encryption is no longer confined to core systems and is being embedded throughout the data lifecycle to safeguard business continuity and customer trust. Encryption is no longer optional; it is fundamental. The challenge now is to make sure it’s ubiquitous and automatic,” Fielding said.
Methodology
2025:
The research was conducted by Censuswide, among a sample of 200 IT security decision makers across the UK. The data was collected between 23.05.2025 – 29.05.2025. Censuswide abides by and employs members of the Market Research Society and follows the MRS code of conduct and ESOMAR principles. Censuswide is also a member of the British Polling Council.
2023/2024:
The research was conducted by Censuswide, among a sample of 604 IT security Decision Makers (18+) across the UK and US across two waves. The data was collected between 30.03.2023 – 10.05.2024. Wave 1 (2023) – 201 IT security Decision Makers (18+) across the UK and Wave 2 (2024) – 403 IT security Decision Makers (18+) across the UK and US. (200 and 203 respondents respectively). Censuswide abides by and employs members of the Market Research Society and follows the MRS code of conduct and ESOMAR principles. Censuswide is also a member of the British Polling Council.
About Apricorn
Apricorn provides American-made, TAA-compliant, FIPS-validated secure storage innovations worldwide. Trusted by companies in finance, healthcare, education, and government, Apricorn’s products have become a standard in data security strategies. Founded in 1983, Apricorn continues to develop award-winning products and patented technologies for enterprises globally. Learn more at www.apricorn.com.
[1] *All ‘Yes’ answers combined
[2] *All ‘Yes’ answers combined
