Ransomware Surge: Companies Grapple with Tough Choices Amid Payment Ban Debates

Global — Ekhbary News Agency

Ransomware attacks are forcing a critical decision upon businesses globally: succumb to hacker demands or face potential data loss. New research indicates nearly half of targeted companies ultimately pay the ransom, a trend coinciding with a sharp rise in attack sophistication.

Ransomware's Evolving Landscape

Cybersecurity group Sophos reported in 2025 that confirmed ransomware victims surged by 389 percent year-on-year, jumping from approximately 1,600 in 2024 to 7,831 worldwide. This escalation is fueled by malicious AI hacking tools like WormGPT, which allow attackers to target multiple organizations simultaneously, dramatically reducing the cost per attack while defense expenses climb.

The Payment Dilemma and Policy Pushback

The median ransom amount continues its upward trajectory, prompting some jurisdictions to consider outright payment bans. The UK government, for example, advances plans to prohibit public sector bodies and critical national infrastructure, including the National Health Service, from making payouts. This policy push, for what it's worth, sparks intense debate among cybersecurity experts.

Jim Walter, a senior threat researcher at SentinelOne, firmly states that paying extortive actors only strengthens the criminal ecosystem, offering no guarantee of data recovery and often encouraging further crime. Conversely, Andy Maus from DriveSavers highlights the complexities, especially for critical services like water utilities, where data recovery without payment might prove unfeasible. Previous bans in North Carolina and Florida, introduced in 2021 and 2022 respectively, appear to have done little to deter criminal activity.

Haydn Brooks of Risk Ledger warns that restricting payments from public bodies will inevitably push cybercriminals towards the less regulated private sector. Such a shift could also dramatically impact the cyber insurance market, leading to skyrocketing premiums as costs far exceed initial ransom demands.