Ransomware: To pay or not to pay?
Summary
On top of this comes the fact that paying a ransom encourages criminals to target other organisations or companies. It is of course understandable that when companies can no longer function, executives will consider all options to protect their shareholders, employees and customers. The decision to pay a ransomware claim should be made carefully, with recognition and acceptance of the risks and in consultation with various stakeholders including, for example, legal counsel, law enforcement, your cyber insurer and security experts. The average ransomware attack can also take weeks and there are, of course, real costs associated with keeping a company offline for days. Other factors to consider include loss of brand reputation, customer satisfaction and potential legal liability.