31/01/2026
Hereās a rare piece of positive cyber security news (and itās still so early in the year) š
According to recent data, only 23% of ransomware victims are now paying attackers.
Thatās the lowest level ever recorded.
Even in attacks where criminals skip encryption and only steal data (a tactic called data exfiltration), just 19% of victims paid in Q3 2025.
For years, cyber criminals relied on fear, pressure and poor backups to force businesses into paying.
But things are changing.
Fast.
Average ransom payments have dropped by 66%, and median payments by 65%.
That means attackers are making far less money⦠and the entire ransomware business model is starting to wobble.
This really is great news.
But why is it happening?
Because more businesses now have strong backups, response plans, and better cyber hygiene.
Theyāre not panicking the way they used to.
Theyāre more prepared.
And when people donāt panic, they donāt pay.
I love to hear this.
But donāt get me wrong, itās impossible to stop every attack.
What you can do, is limit the damage so recovery is possible without negotiating with criminals.
Every business that refuses to pay effectively removes oxygen from the ransomware ecosystem.
And collectively, itās working š„³
š Is your recovery strategy robust enough to make you confident not paying a ransom? (If youāre not sure, get in touch and I can help)