Ransomware: Over 50% of Victims Pay Ransom

Over 50% of companies that fall victim to ransomware attacks choose to pay the ransom. This practice is heavily criticized by security authorities and experts, as it encourages attackers and increases the likelihood of further attacks. Authorities have been warning against paying ransoms for years. The main reason is that payment provides attackers with new financial resources that they can use for future attacks. This leads to a vicious cycle where companies repeatedly become targets of ransomware.

A recent study has now highlighted another aspect: paying the ransom often does not lead to data recovery. In many cases, victims do not receive the promised decryption tools after payment, or the data is incomplete. The study shows that 70% of companies that paid the ransom were unable to fully recover their data. This raises the question of whether payment is truly a solution or merely offers a temporary relief. Additionally, it is noted that paying ransoms can also have legal consequences.

Companies that pay ransoms could violate money laundering or terrorism support laws, which can lead to further problems. The security situation has worsened in recent years. According to the Cybersecurity Report 2026, there was a 30% increase in ransomware attacks last year. This indicates that the threat of ransomware continues to grow, putting pressure on companies to improve their security measures. Experts recommend investing in preventive measures instead.

These include regular backups, employee training, and the implementation of security solutions that can detect ransomware attacks early. These strategies can help minimize the impact of an attack. The discussion about paying ransoms is also being taken up by policymakers. Some countries are considering introducing legal regulations that prohibit or at least severely restrict ransom payments. This could force companies to develop alternative strategies to combat ransomware.

The study also showed that companies that pay ransoms often operate under significant pressure to act quickly. The fear of data loss and operational disruptions leads many companies to make impulsive decisions that they may later regret. The results of the study were published on July 15, 2026, and have already sparked a broad discussion in the cybersecurity community. Experts are calling for increased awareness of the risks of ransom payment and the need to better prepare against ransomware attacks.