• Ransomware remains the most prominent malware threat. (Datto, 2019)
  • Malicious emails are up 600% due to COVID-19. (ABC News, 2021)
  • 37% of respondents’ organizations were affected by ransomware attacks in the last year. (Sophos, 2021)
  • In 2021, the largest ransomware payout was made by an insurance company at $40 million, setting a world record. (Business Insider, 2021)
  • The average ransom fee requested has increased from $5,000 in 2018 to around $200,000 in 2020. (National Security Institute, 2021)
  • Experts estimate that a ransomware attack will occur every 11 seconds in 2021. (Cybercrime Magazine, 2019)
  • Out of 1,086 organizations whose data had been encrypted, 96% got their data back. (Sophos, 2021)
  • About 1 in 6,000 emails contain suspicious URLs, including ransomware. (Fortinet, 2020)
  • The average downtime a company experiences after a ransomware attack is 21 days. (Coveware, 2021)
  • 71% of those who are affected by ransomware have been infected. Half of the ransomware attacks that are successful infect at least 20 computers in the organization. (Acronis, 2020)
  • The most common tactics hackers use to carry out ransomware attacks are email phishing campaigns, RDP vulnerabilities, and software vulnerabilities. (Cybersecurity & Infrastructure Security Agency, 2021)
  • 65% of employers allow their employees to access company applications from unmanaged, personal devices. (Bitglass, 2020)
  • From a survey conducted with 1,263 companies, 80% of victims who submitted a ransom payment experienced another attack soon after, and 46% got access to their data but most of it was corrupted. (Cybereason, 2021)
  • Additionally, 60% of survey respondents experienced revenue loss and 53% stated their brands were damaged as a result. (Cybereason, 2021)
  • 29% of respondents stated their companies were forced to remove jobs following a ransomware attack. (Cybereason, 2021)
  • 42% of companies with cyber insurance policies in place indicated that insurance only covered a small part of damages resulting from a ransomware attack. (Cybereason, 2021)