Government Sector Hit Hard By Ransomware Attacks According to New Report

ExtraHop recently released its global ransomware trends report, a data-driven analysis of ransomware impacts across geographies, industries, and organizations of different sizes.

According to the research, security leaders report that they are increasingly being targeted by ransomware actors, averaging nearly eight incidents per year and paying out an average of just under $2.5 million in ransom payments. And while ransomware activity is up across the board, some businesses find themselves to be a more likely target, depending on different demographics, such as the markets in which they operate or size of their organizations.

The U.S. is feeling the heat.

U.S. organizations felt the impact of ransomware the most, experiencing the highest number of incidents on average and paying out the largest ransoms (nearly $2 million more than the global average). German respondents, on the other hand, experienced the fewest incidents.

Governments are paying big ransoms.

Despite stating ransomware isn’t its biggest risk, the government sector averaged more than eight attacks last year and had one of the largest average ransom payments of $3.8 million. The government sector also noted the largest percentage of organizations paying more than $25 million in ransom payments.

Bigger isn’t always better.

The larger the company, the more likely it was to experience a ransomware incident. Organizations with more than 5,000 employees were more likely to pay the ransom every time and, on average, paid more than $4 million in ransom payments.

“Ransomware is targeting some organizations more than others, but despite this notion, everyone needs to be prepared to curtail exposure to the risks and damage posed by an incident,” said Mark Bowling, Chief Information Security and Risk Officer at ExtraHop. “As ransomware continues to find ways to bypass and evade existing security controls, we can anticipate that these statistics will only grow more dire. Amid high-profile political elections and a growing call for regulatory action across the globe, it is time that the cybersecurity industry comes together to develop and adopt a more resilient security framework that can identify a ransomware attack before it devastates entire organizations, industries, and even economies.”

Featured

New Products

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.