(MENAFN- GlobeNewsWire - Nasdaq) Impact of ransomware causing significant damage to revenue and reputation
SUNNYVALE, Calif., Jan. 28, 2025 (GLOBE NEWSWIRE) -- Ransomware attacks are disrupting and undermining business operations and draining revenue streams, according to new research from the Ponemon Institute, commissioned by Illumio, Inc. , the leader in breach containment.
Findings from The Global Cost of Ransomware Study reveal that 58% of organizations had to shut down operations following a ransomware attack, up from 45% in 2021. Forty percent reported a significant loss of revenue (up from 22% in 2021); 41% lost customers; and 40% had to eliminate jobs.
The research examined the scope of ransomware threats confronting organizations and the measures being implemented to reduce the risks and their impacts. Key findings include:
Attackers are reaching critical systems to cause maximum disruption: Ransomware attacks impacted 25% of critical systems, with systems down for 12 hours on average. Organizations continue to spend significant time and money containing ransomware: On average, it took 17.5 people, 132 hours each to contain and remediate their largest ransomware attack. Costs associated with reputation and brand damage now exceed those from legal and regulatory actions: 35% experienced significant brand damage from an attack (up from 21% in 2021). Failure to prioritize investments that boost resilience is costing businesses: 44% lack the ability to quickly identify and contain attacks, and only 27% have implemented microsegmentation – a vital control for stopping the spread of breaches.
“Ransomware is more pervasive and impactful than ever, with more organizations forced to suspend operations or experiencing major business failure because of attacks,” said Trevor Dearing, Director of Critical Infrastructure at Illumio.“Organizations need operational resilience and controls like microsegmentation that stop attackers from reaching critical systems. By containing attacks at the point of entry, organizations can protect critical systems and data, and save millions in downtime, lost business, and reputational damage.”
Cloud and hybrid environments remain weak links, with attackers exploiting unpatched systems
The increased connectivity of business systems and devices is making it harder for organizations to defend against ransomware attacks. Organizations perceive the cloud as being the most vulnerable, and 35% say a lack of visibility across hybrid environments makes it difficult to respond to ransomware attacks.
Desktops and laptops remain the most compromised devices (50%), with phishing and Remote Desktop Protocol (RDP) cited as top entry points for ransomware. Most attacks moved across the network to infect other devices. In over half of these cases (52%), attackers exploited unpatched systems to move laterally and escalate system privileges; up significantly from 33% in 2021.
Organizations are investing heavily in ransomware defense, but efforts are falling short
According to the research, nearly a third of IT budgets (29%) are allocated to staff and technologies meant to prevent, detect, contain, and resolve ransomware attacks, yet attacks are still successful. Eighty-eight percent of organizations have fallen victim to a ransomware attack, despite 54% being confident in their security posture.
Organizations are also taking a chance on ransomware recovery and failing. Fifty-two percent of respondents believe having a full and accurate backup is a sufficient defense against ransomware. Yet only 13% were able to recover all impacted data following a ransomware attack.
The report also found larger organizational challenges in defending against ransomware including:
Ransomware reporting is still not happening: 72% of those that experienced a ransomware attack didn't report it to law enforcement. Top reasons for not reporting include fear of publicizing the incident (39%); a payment deadline (38%); and fear of retaliation (38%). Employees are more security conscious, but still a weak link: 40% are confident in the ability of employees to detect social engineering lures (up from 30% in 2021), however, insider negligence is the top challenge when responding to ransomware attacks. Organizations are slow to adopt AI to combat ransomware: Only 42% have specifically adopted AI to help combat ransomware. More (51%) are concerned their organization may experience an AI-generated ransomware attack.
To learn more, download the full Global Cost of Ransomware Study here or check out the blog here .
Research Methodology
The research was conducted by Ponemon Institute on behalf of Illumio among 2,547 IT and cybersecurity practitioners in the US, UK, Germany, France, Australia and Japan. All participants have responsibility for addressing ransomware attacks within their organizations.
About Illumio
Illumio, the most comprehensive Zero Trust solution for ransomware and breach containment, protects organizations from cyber disasters and enables operational resilience without complexity. By visualizing traffic flows and automatically setting segmentation policies, the Illumio Zero Trust Segmentation Platform reduces unnecessary lateral movement across the multi-cloud and hybrid infrastructure, protecting critical resources and preventing the spread of cyberattacks.
Contact Information
...
About Ponemon Institute
Ponemon Institute is dedicated to independent research and education that advances responsible information and privacy management practices within business and government. Our mission is to conduct high quality, empirical studies on critical issues affecting the management and security of sensitive information about people and organizations.
We uphold strict data confidentiality, privacy and ethical research standards. We do not collect any personally identifiable information from individuals (or company identifiable information in our business research). Furthermore, we have strict quality standards to ensure that subjects are not asked extraneous, irrelevant or improper questions.
MENAFN28012025004107003653ID1109138787
Legal Disclaimer:
MENAFN provides the information “as is” without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the provider above.