Four in five ransomware victims suffer repeat attacks

Lightning often strikes twice, says Cybereason research

Four in every five organizations that pay ransomware fees suffer another attack, according to research released today by security company Cybereason. 

The company published the figure in a report that surveyed cyber security professionals worldwide, with 24% of them based in the US. It found that 46% of the companies targeted a second time were attacked by the same criminals that infected them the first time. 

A rise in double extortion attacks — ransomware attacks that encrypt files and steal data — is likely to spur repeat attacks from ransomware groups and their affiliates who want to extract more money from victims. 

According to the report, DarkSide, the gang that successfully attacked Colonial Pipeline, had been pressuring its targets with threats to release insider information to stock traders so they could short company shares. 

Cyber criminals seem to be good at honoring ransom payments by providing decryption keys, but they aren't great at quality assurance. While 51% of companies that paid a ransom said they retrieved their data in full. Another 46% said they got their data back, but some of it was corrupted. Only 3% didn't get their data back at all. 

Ransomware attacks also had a devastating effect on businesses. The study revealed that two-thirds of organizations suffered significant revenue losses, and 29% laid off some staff in the wake of an attack, which often led to the business’s demise. In the US, 31% of companies suffering a ransomware attack closed altogether. 

Related Resource

Defend your organisation from evolving ransomware attacks

Learn what it takes to reduce risk and strengthen operational resiliency

Defend your organisation from evolving ransomware attacks - whitepaper from VeritasDownload now

Senior executives weren’t immune from the effects of successful ransomware attacks. The report found that a third of companies lost senior leadership after an attack, either by dismissal or resignation. 

The research found businesses relied heavily on cyber insurance to cover the losses, as 54% of companies took out a policy. However, this often isn't an effective hedge against ransomware risk. Of companies with cyber insurance and suffered an attack, 42% said cyber insurance only partially covered the losses. 

Featured Resources

How virtual desktop infrastructure enables digital transformation

Challenges and benefits of VDI

Free download

The Okta digital trust index

Exploring the human edge of trust

Free download

Optimising workload placement in your hybrid cloud

Deliver increased IT agility with the cloud

Free Download

Modernise endpoint protection and leave your legacy challenges behind

The risk of keeping your legacy endpoint security tools

Download now

Recommended

Russia's "politically motivated" REvil raid could be used as leverage, experts warn
ransomware

Russia's "politically motivated" REvil raid could be used as leverage, experts warn

17 Jan 2022
Meta files lawsuit to uncover hackers targeting Facebook, WhatsApp
phishing

Meta files lawsuit to uncover hackers targeting Facebook, WhatsApp

21 Dec 2021
Five things to consider before choosing an MFA solution
Security

Five things to consider before choosing an MFA solution

17 Dec 2021
Australia and US sign CLOUD Act data-sharing deal to support criminal investigations
cyber crime

Australia and US sign CLOUD Act data-sharing deal to support criminal investigations

16 Dec 2021

Most Popular

How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

6 Jan 2022
Dell XPS 15 (2021) review: The best just got better
Laptops

Dell XPS 15 (2021) review: The best just got better

14 Jan 2022
How to speed up Windows 11
Microsoft Windows

How to speed up Windows 11

7 Jan 2022