# Greedy Ransomware Crews Return for Seconds

22% of victims who pay are targeted again.

- **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1)
- **Published:** 2026-07-22
- **Topic:** [Business](https://brifing.si/c/business)
- **Original article:** <https://www.theregister.com/security/2026/07/22/over-a-third-of-ransomware-victims-re-extorted-after-paying/5276218>
- **On Brifing:** https://brifing.si/s/b3abc32f-ad28-42a2-88c0-3d5a789569e3

## Paying Ransom Doesn't Solve the Problem

Proofpoint's research shows that 22% of organizations that pay a ransom are targeted again. This demonstrates that paying doesn't resolve the issue and that cybercriminals are untrustworthy. In the UK, 58% of organizations paid, but it didn't protect them.

## Global Situation is Alarming

Globally, 54% of victim organizations pay ransoms. While the rate is 19% in Japan, it skyrockets to 93% in the US. Regional variations are attributed to regulatory environments, recovery capabilities, and insurance structures. However, the core truth remains: paying doesn't solve the problem.

## Cybercriminals Retain Stolen Data

Operation Cronos, which dismantled the LockBit gang, proved that cybercriminals retain victim data even after receiving payment. This shows that paying doesn't restore the status quo. Some victims never recovered their files despite paying.

## Decryptor Errors Create Further Issues

Nitrogen's ESXi ransomware victims faced issues due to a coding error in the decryptor, leaving some unable to fully restore access. This highlights that paying isn't always a solution and that cybercriminals don't keep their promises.

## Cyber Resilience is the Key Solution

Instead of paying ransoms, organizations need to build cyber resilience. This is a critical step to prevent attacks and mitigate their impact. Cybersecurity measures offer a more effective solution than paying ransoms.

## AI Makes Attacks More Dangerous

While AI doesn't directly impact ransomware attacks, it enhances the effectiveness of precursor attacks. In the UK, 65% of security practitioners noted that AI sharpens phishing and credential theft campaigns. This underscores the importance of the human factor.

## Sources covering this story

- https://www.theregister.com/security/2026/07/22/over-a-third-of-ransomware-victims-re-extorted-after-paying/5276218 — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
