Pay up or not? Ransomware surge has victims facing tough choices

Ransomware attacks have surged dramatically with 389% year-over-year growth in confirmed victims, AI-powered tools enabling attackers to target multiple organizations simultaneously, and nearly half of companies paying ransoms despite increasing legal and regulatory risks. Governments are implementing payment bans to deter attacks, but security experts debate effectiveness, arguing that payment prohibitions risk harming critical infrastructure while failing to address root causes like unpatched vulnerabilities and weak access controls. IT leaders face a critical strategic choice: invest heavily in preventive measures like vulnerability management, zero-trust access controls, and backup infrastructure rather than treating ransom decisions as a reactive business problem.