Ransomware attacks are costing Government offices a month of downtime on average

(Image credit: Avast)

New research claims downtime from ransomware attacks is costing government agencies thousands
The average downtime after an attack is over 27 days
RansomHub is the top offender

New research from Comparitech has outlined that a key underestimated aspect of ransomware is costing Government agencies thousands of dollars per day - downtime.

Of the over 1,000 confirmed ransomware attacks tracked, nearly a month’s worth of downtime was lost per attack on average, costing nearly $84,000 per day.

For government agencies, the average downtime is higher than other sectors, with healthcare averaging 16 days, and 12 days for manufacturers. Although fewer than half of all ransomware incidents end in payment, the total amount paid in previous years has hit over $1 billion, so attacks can be seriously expensive all-round.

Key targets

The research points to government entities being less equipped to overcome attacks, most likely from budget constraints leading to longer recovery times.

On average, attackers demanded $2.2 million in ransom, but it's very rarely confirmed whether a ransom is paid or not - and some governments like the UK have launched proposals which would effectively ban state run organizations from paying ransoms in order to dissuade groups from targeting them.

But this doesn’t stop attackers, with government agencies frequently topping the list of most popular targets.

Critical infrastructure organizations are increasingly at risk of geopolitically motivated attacks, looking to disrupt service providers and undermine trust in public institutions.

The report outlines that notorious group RansomHub is responsible for stealing the most data, with over 730,000 records taken since 2018. Close behind them is ALPHV with 700,000, and Brain Cipher with 650,000 records stolen.

Although it's a fairly new group, RansomHub continues to find success in attacking both public and private organizations , with the group claiming to have made a victim of MetLife earlier in 2025.

Take a look at our picks for the best malware removal software around
Check out our choice for best antivirus software
One of the most powerful ransomware hacks around has been cracked using some serious GPU power

Ellen has been writing for almost four years, with a focus on post-COVID policy whilst studying for BA Politics and International Relations at the University of Cardiff, followed by an MA in Political Communication. Before joining TechRadar Pro as a Junior Writer, she worked for Future Publishing’s MVC content team, working with merchants and retailers to upload content.