Four in every five organizations that pay ransomware fees suffer another attack, according to research released today by security company Cybereason.
The company published the figure in a report that surveyed cyber security professionals worldwide, with 24% of them based in the US. It found that 46% of the companies targeted a second time were attacked by the same criminals that infected them the first time.
A rise in double extortion attacks — ransomware attacks that encrypt files and steal data — is likely to spur repeat attacks from ransomware groups and their affiliates who want to extract more money from victims.
According to the report, DarkSide, the gang that successfully attacked Colonial Pipeline, had been pressuring its targets with threats to release insider information to stock traders so they could short company shares.
Cyber criminals seem to be good at honoring ransom payments by providing decryption keys, but they aren't great at quality assurance. While 51% of companies that paid a ransom said they retrieved their data in full. Another 46% said they got their data back, but some of it was corrupted. Only 3% didn't get their data back at all.
Ransomware attacks also had a devastating effect on businesses. The study revealed that two-thirds of organizations suffered significant revenue losses, and 29% laid off some staff in the wake of an attack, which often led to the business’s demise. In the US, 31% of companies suffering a ransomware attack closed altogether.
RELATED RESOURCE
Defend your organisation from evolving ransomware attacks
Learn what it takes to reduce risk and strengthen operational resiliency
Senior executives weren’t immune from the effects of successful ransomware attacks. The report found that a third of companies lost senior leadership after an attack, either by dismissal or resignation.
The research found businesses relied heavily on cyber insurance to cover the losses, as 54% of companies took out a policy. However, this often isn't an effective hedge against ransomware risk. Of companies with cyber insurance and suffered an attack, 42% said cyber insurance only partially covered the losses.
-
Google CEO Sundar Pichai says vibe coding has made software development ‘exciting again’News Google CEO Sundar Pichai claims software development has become “exciting again” since the rise of vibe coding, but some devs are still on the fence about using AI to code.
-
15-year-old revealed as key player in Scattered LAPSUS$ HuntersNews 'Rey' says he's trying to leave Scattered LAPSUS$ Hunters and is prepared to cooperate with law enforcement
-
15-year-old revealed as key player in Scattered LAPSUS$ Hunters
News 'Rey' says he's trying to leave Scattered LAPSUS$ Hunters and is prepared to cooperate with law enforcement
-
The Scattered Lapsus$ Hunters group is targeting Zendesk customers – here’s what you need to knowNews The group appears to be infecting support and help-desk personnel with remote access trojans and other forms of malware
-
Impact of Asahi cyber attack laid bare as company confirms 1.5 million customers exposedNews No ransom has been paid, said president and group CEO Atsushi Katsuki, and the company is restoring its systems
-
The US, UK, and Australia just imposed sanctions on a Russian cyber crime group – 'we are exposing their dark networks and going after those responsible'News Media Land offers 'bulletproof' hosting services used for ransomware and DDoS attacks around the world
-
A notorious ransomware group is spreading fake Microsoft Teams ads to snare victimsNews The Rhysida ransomware group is leveraging Trusted Signing from Microsoft to lend plausibility to its activities
-
Volkswagen confirms security ‘incident’ amid ransomware breach claimsNews Volkswagen has confirmed a security "incident" has occurred, but insists no IT systems have been compromised.
-
The number of ransomware groups rockets as new, smaller players emergeNews The good news is that the number of victims remains steady
-
Teens arrested over nursery chain Kido hacknews The ransom attack caused widespread shock when the hackers published children's personal data
