Encryption Usage Hits 96% in Organizations, Yet Data Security Gaps Persist

Encryption Adoption Trends in 2025

A recent survey conducted by Apricorn has unveiled some compelling data regarding encryption practices among U.S.-based organizations. With 96% of respondents confirming an increase in encryption implementation, it is evident that businesses are recognizing the crucial role that encryption plays in safeguarding sensitive information.

Approximately 64% of those surveyed attributed their uptick in encryption to the need for improved data protection, particularly concerning lost or stolen devices. This rise aligns well with the growing trend of remote and hybrid work environments, where data often operates outside traditional perimeter defenses. In fact, nearly 29% of organizations cited remote working as a primary motivator for their encryption measures, reflecting a 10% increase from the previous year.

However, there remains a critical gap in consistent application of these encryption measures. During the survey, 7% of participants admitted to being unsure about which data sets warrant encryption. This uncertainty poses a significant hurdle to establishing robust cybersecurity frameworks in an age where remote working is the norm.

Interestingly, while encryption can be an effective method to thwart ransomware attacks, its perceived efficacy appears to be diminishing. In 2025, only 4% of organizations reported using encryption specifically as a defensive mechanism against ransomware, down from 12% a year before. This shift suggests that organizations are re-evaluating their strategies, focusing on creating secure backups of data rather than solely on preventing initial attacks.

The increase in encrypted systems highlights a maturation process within organizations when it comes to data security policies. A full 96% reported that they have a defined data encryption policy for removable media. Furthermore, data from the survey indicates a conscientious approach to hardware encryption; 36% of organizations restrict the use of removable media to those that are hardware-encrypted and approved by the organization.

As for which devices are prioritized for encryption, desktops and laptops are understandably at the forefront, with 67% and 62% of organizations encrypting these devices, respectively. However, encryption is also being expanded to include USB sticks (53%) and portable hard drives (52%), recognizing the vulnerabilities posed by portable devices in terms of data security.

A future-focused mindset is clear, as businesses express their intent to broaden encryption efforts across various device types. Devices such as portable hard drives (39%), mobile phones (34%), USB sticks (32%), laptops (31%), and desktops (27%) are all set to receive enhanced encryption measures as part of a comprehensive strategy to protect sensitive data.

Notably, a lack of encryption has been identified as the leading cause of data breaches by 23% of respondents. This underscores the pressing need for organizations to prioritize encryption as part of their routine practices rather than treat it as an afterthought. Kurt Markley, Managing Director at Apricorn, emphasizes, "The job isn't done just because a policy exists. If encryption isn't regularly utilized on daily devices, sensitive data remains vulnerable. It's essential to integrate good intentions into everyday actions."

In conclusion, the data gleaned from Apricorn's survey points to a significant rise in encryption adoption among organizations while simultaneously exposing critical vulnerabilities in consistent application. Businesses must not only implement robust encryption policies but also make it an integral part of their data handling routines to cultivate true resilience against emerging cyber threats.