Ransomware is a cybersecurity issue that refuses to disappear. If anything, attacks are becoming more disruptive, difficult to fix and financially costly. The average ransom demand in 2025 was $1.3 million and over half of payments cost over $1 million. A stark contrast compared with ransomware attacks a decade ago which saw average ransom demands of under $1000 according to a Symantec report published in 2016.
Even when victims refuse to pay a ransom in return for a decryption key, ransomware attacks are still costly. You just have to look at the long-term operational and financial impact ransomware attacks had on organizations like Jaguar Land Rover, Marks & Spencer and Asahi in 2025.
In 2026, there has already been several high-profile ransomware incidents, indicating the problem shows no signs of abating.
The uncomfortable truth is that ransomware has been known to be significant cybersecurity risk to organizations for at least a decade, but it’s also more disruptive than ever before. So, why is this the case?