Ransomware Double-Dip: Re-Victimization in Cyber Extortion

This Orange Cyberdefense analysis examines the evolving Cyber Extortion (ransomware) landscape, reporting a sharp rise in victims (11,244 recorded between Jan 2020–Mar 2024, with estimates far higher when accounting for unreported victims), persistent and resilient threat actors (e.g., Cl0p, LockBit, ALPHV), law enforcement disruption efforts, and a studied phenomenon of re-victimization where victims reappear across leak sites due to re-attacks, data/access reuse, or affiliate crossovers—highlighting the ecosystem's volatility, high scale, and ongoing risk to organizations.