Paying Hacker Ransoms Often Leads to Repeat Demands
A new report indicates that over one-third of companies that paid hacker ransoms were subsequently hit with a second demand. Hackers frequently return for more.
Companies that pay hacker ransom demands are increasingly likely to be targeted again, according to a new study. Cybersecurity firm Proofpoint's report found that 34% of organizations that paid ransom were hit with a subsequent extortion demand.
The survey, which polled 953 companies, reinforces a long-held understanding among cybersecurity professionals: negotiating with extortionists is often futile, as there is little incentive for attackers to cease their demands once payment is made.
Proofpoint's data reveals that ransomware and extortion attacks have evolved beyond single transactions. Attackers now employ multiple leverage points, such as threatening data leaks or re-encryption, to ensure victims pay again, creating a cycle of repeated extortion.
The findings underscore the need for robust cybersecurity defenses and proactive measures, rather than conceding to demands. While paying may seem like the quickest solution, it frequently leads to further complications and increased long-term risk for organizations.