New Enterprise Strategy Group Study Shows Cyber Attacks are Rapidly Increasing Despite Security Perimeter and Mitigation Strategies

In a new Enterprise Strategy Group (ESG) study released today, 65 percent of organizations confirmed that ransomware is one of the top three threats to their viability. And for 13 percent, it is the biggest threat. The ESG study, titled "2023 Ransomware Preparedness: Lighting the Way to Readiness and Mitigation" surveyed information technology (IT) and cybersecurity professionals working within organizations across the United States and Western Europe.

According to the report's findings, while ransomware attacks are sometimes kept private from the public, they are a common occurrence and represent both a significant and recurring source of business disruption. Among the 600 respondents, only 16 percent of those whose organization had experienced a successful ransomware attack were able to fully recover all their data after the attack, while a staggering 84 percent lost data they were not able to recoup.

The study, co-sponsored by Keepit, the world's leading vendor-independent, 100 percent cloud Software-as-a-Service (SaaS) for data protection, sought to identify proactive and reactive strategies employed by organizations to guard against growing ransomware attacks, examine mitigation best practices, and share how organizations can be better prepared in the coming 12 to 18 months.

57 percent pay additional ransom

"Threat actors continue their attacks because, for them, it is a business model that works. In most cases, a ransomware attack results in permanently lost data, even when companies meet the ransom demand." said Keepit Chief Technology Officer Jakob Østergaard. Of the companies in the ESG study that reported that they had experienced a successful ransomware attack and paid the ransom, 85 percent experienced additional extortion attempts, and 57 percent paid the additional fees beyond the initial ransomware demand, Ostergaard continued. "

Threat actors are getting increasingly bold in their ransomware demands, giving their targets no choice but to relent and pay to get their data back and restore daily operations. As a result of this ongoing and growing problem, 80% of organizations surveyed stated that they expect their spending in support of ransomware preparedness to increase over the next 12 to 18 months.

"Organizations continue to struggle with ransomware preparedness and need to establish updated strategies and processes in particular in the critical dimension of data and systems recoverability," said Christophe Bertrand, practice director at ESG. "The results of this study are critical to understanding the key components of data recovery after a ransomware attack, and it is our hope that the report can serve as a resource for organizations as they work towards preparedness."

Keepit's Østergaard goes on to say, "What this tells us is that no matter what a company does, fully recouping stolen data is highly unlikely. In other words, it doesn't pay to pay. Cloud data is increasingly becoming a target for cyber criminals who really want to render businesses inoperable, and organizations are having to continually increase their expenditures on ransomware preparedness. According to the study, 74 percent of respondents are concerned that their backups could be compromised by ransomware. This is where the Keepit platform really distinguishes itself and brings unique value: We can guarantee the protection of cloud data and backup copies with immutable, blockchain-verified technology and encryption, and store it in a completely separate, vendor-independent infrastructure. These measures prevent the type of data loss that has become so common, offering our customers a solid return on their preparedness investment."

To access the report, visit: 2023 Ransomware Preparedness: Lighting the Way to Readiness and Mitigation

About Keepit

Keepit is a Software-as-a-Service company that provides dedicated data protection for companies with data stored in the cloud. Keepit is the world's only vendor neutral and independent cloud dedicated to SaaS data protection based on a blockchain-verified solution. Keepit protects data in key business applications including Microsoft 365, Microsoft Azure AD, Google, and Salesforce. Headquartered in Copenhagen with offices and data centers globally, Keepit is trusted by thousands of companies worldwide to protect and manage their cloud data. For more information, visit www.keepit.com or follow Keepit | LinkedIn.