To Pay or Not to Pay? Ransomware Surge Forces Tough Decisions
Companies face difficult choices in ransomware attacks
1Rise in Ransomware Attacks
According to 2025 research, nearly half of companies targeted by ransomware attacks end up paying the ransom. The median amount demanded is also increasing. Globally, some jurisdictions are responding by banning ransom payments to combat this issue.
2UK Moves to Ban Ransom Payments
The UK government is advancing plans to prohibit public sector bodies and critical national infrastructure groups from making ransom payments. These groups include the National Health Service, local councils, and schools. This ban comes as ransomware attacks, particularly targeting small and medium-sized businesses, are on the rise.
3Advanced Tactics of Ransomware Groups
Ransomware groups are now targeting companies with more advanced and meticulous methods. Risk Ledger CEO Haydn Brooks notes that by 2026, the ransomware ecosystem has become highly sophisticated. These groups operate like smart B2B operations to ensure data return.
4AI-Powered Attacks
Fortinet's systems engineering director Dave Spillane highlights that malicious AI tools like WormGPT and FraudGPT have fueled ransomware attacks. In 2025, confirmed ransomware victims increased by 389% year-on-year, reaching 7,831 globally. This has lowered the cost of attacks while increasing defense costs.
5Decreasing Cost of Attacks
Shashi Kiran, chief marketing officer at Nile, points out that the cost of ransomware attacks has significantly decreased, commoditizing sophisticated attacks. Kiran emphasizes that what once required nation-states can now be accomplished by individuals with basic skills leveraging AI.
6Tough Decisions for Companies
Companies are forced to make difficult decisions when faced with ransomware attacks—whether to pay the ransom or not. The ban on ransom payments and the rise in attacks necessitate a reevaluation of cybersecurity strategies.