Shifting Perspectives on Ransomware Payments
Organisations are adapting to the evolving landscape of cybersecurity, and Databarracks' recent findings reveal that these shifts are significant. The Data Health Check for 2025 shows a drastic change in the approach towards ransomware. The data indicates that businesses are now three times more likely to recover their data from backups instead of succumbing to ransom demands. This trend highlights a growing confidence in backup systems amidst rising cyber threats.
Declining Ransom Payments
According to the survey conducted among 500 IT decision-makers, a mere 17% of businesses that faced ransomware attacks in the past year chose to pay the ransom. This marks a dramatic decrease from 27% in 2024 and an even higher 44% in 2023. Conversely, an impressive 57% of the organisations successfully recovered their critical data from backups.
Backup Practices on the Rise
The report reveals that improved backup practices are a crucial factor in this change. Various strategies have emerged among organisations:
- Seventy-two percent of organisations have implemented air-gapped backups
- Fifty-nine percent have adopted immutable backups
This newfound resilience demonstrates how businesses are taking proactive measures to safeguard their data.
Formulating Resilience Policies
Beyond technical practices, more organisations are formalising their policies against ransom payments. The survey reports that 24% of businesses now have a definitive stance to never pay a ransom, effectively doubling since 2023. This change aligns with the recent announcements from the UK Government regarding its new ransomware policy, which includes prohibitions on ransom payments by public entities and enforces mandatory reporting for the private sector.
Commentary from Experts
James Watts, Managing Director at Databarracks, shared insights on the government's evolving stance. He expressed that while the government’s policies are robust, they also reflect the trajectory businesses were already on. In the past, paying a ransom seemed like the only recourse for many, but with advancements in backup technology, companies are now more equipped to handle attacks without succumbing to threats from cybercriminals.
Watts emphasized, "The organisations that strategically plan and rehearse their recoveries are the ones that emerge the strongest post-attack. This is not just about paying a ransom; it’s about preparing a comprehensive recovery strategy to combat ransomware effectively."
Future Directions for IT Resilience
The Data Health Check for 2025 indicates a growing recognition that improving backup processes is now the highest priority for IT resilience among UK organisations. This approach has surpassed both continuity planning and recovery testing, marking a significant evolution in how businesses view data protection.
Conclusion
The transition towards effective backup strategies instead of ransom payments signals a monumental shift in the cybersecurity field. The key takeaway is that organisations must now embrace the concept of recovery as a critical part of their operational strategy.
About Databarracks
Databarracks, established in 2003, is a leader in technology and business resilience. Their pioneering management services have set a benchmark, providing critical data protection through industry-leading IT resilience and continuity services. Today, Databarracks remains committed to empowering organisations to harness the potential of the cloud while ensuring the safety of their data.
Frequently Asked Questions
What did the Data Health Check 2025 reveal?
The report indicates that only 17% of UK businesses paid ransoms after ransomware attacks, highlighting a shift towards backup recovery.
Why are businesses moving away from paying ransoms?
Improved backup solutions and strategies are enabling organisations to recover their data without resorting to criminal demands.
What measures have organisations implemented?
Seventy-two percent have adopted air-gapped backups, and fifty-nine percent are using immutable backups to safeguard data.
How has government policy influenced businesses?
The UK Government's new ransomware policy discourages ransom payments, prompting more businesses to formalise their stance against paying.
What is the future for IT resilience in the UK?
The focus on improving backup processes signifies a positive trend in IT resilience, with businesses prioritising recovery strategies over ransom payments.
