Majority of Organizations Who Paid Ransom Demand Attacked Again

A study summarized in the report finds that paying ransomware demands correlates with high risk of repeat compromise (80% of organizations that paid were attacked again), substantial business impacts (66% revenue loss, 53% reputational damage, 31% suspended operations), incomplete data recovery (only 47% regained uncorrupted data, 84% did not fully recover), and long attacker dwell time (60% present up to six months). The report concludes paying is not a reliable solution and advocates prevention, resilience, and strong incident response while including a vendor call-to-action.