Ransomware Attacks: Experts Warn of CEO Mistakes

Cyber attacks, particularly from ransomware, have significantly increased in recent years and are increasingly affecting medium-sized enterprises. According to a recent analysis, over 60% of the affected companies are in the medium-sized sector. These attacks not only lead to financial losses but also to substantial production downtimes. Experts warn that the biggest mistake a company can make is for the CEO to ask, "How do I pay?" This mindset can lead companies to become dependent on the extortionists. Instead, companies should develop strategies to better protect themselves and respond appropriately in the event of an attack.

A central aspect of prevention is employee training. Many attacks occur through phishing emails specifically sent to employees. Comprehensive training can help employees recognize suspicious emails and act accordingly. About 90% of successful cyber attacks are based on human error. Additionally, companies should invest in modern security solutions.

Firewalls, antivirus software, and regular security updates are essential to protect the IT infrastructure. According to the Federal Office for Information Security (BSI), over 80% of companies in Germany are not adequately protected against cyber attacks. In the event of a ransomware attack, it is important to have a clear emergency plan. Experts recommend that companies establish in advance how they want to respond in case of an emergency. This also includes forming a crisis team that handles communication with the extortionists.

Only 30% of companies have already implemented such a plan. Negotiations with extortionists should be conducted with utmost caution. Experts advise against directly addressing the demands but rather gathering information and analyzing the situation first. A well-informed approach can help strengthen the negotiating position and potentially reduce the demands. Another important point is the regular backup of data.

Companies should ensure they have up-to-date backups that can be quickly restored in the event of an attack. About 50% of companies that fell victim to a ransomware attack did not have current backups of their data. The legal framework for dealing with ransomware is complex. Companies should inform themselves about the applicable laws and regulations to avoid legal consequences. In Germany, for example, it is illegal to pay ransom if it leads to the financing of criminal activities.

The cyber security situation is expected to worsen. Experts predict that the number of ransomware attacks could increase by 30% by the end of 2026. Companies are therefore required to continuously review and adjust their security strategies. “The best defense against ransomware is a proactive security strategy that considers both technical and human factors,” says a leading cyber security expert.