Data recovery is cheaper than paying off a ransomware hacker

(Image credit: Shutterstock / Magura)

Stumping up the cost of a ransomware demand might not be the cheapest way to get back your stolen data, new research has claimed.

According to a new Sophos whitepaper, the average cost of remediating a ransomware attack is approximately twice as much for businesses who pay a ransom to their attackers.

The security firm asked nearly 2,000 organizations whose data had been encrypted by a ransomware attack if they paid their attackers and what the total cost of addressing the incident had been. On average, respondents who paid up lost $1,450,000. Meanwhile, surveyed businesses that used other means of data recovery took a $730,000 hit.

Costly

The authors of the research accept that this finding is a little counter-intuitive, as paying a ransom should, theoretically, mean expensive downtime is avoided. However, the truth is that data restoration costs are likely to be the same whether you’re working from backups or files which hackers have released.

One explanation for the findings is that attackers don’t build ransom software which automatically restores every file once a single code has been entered. Consequently, data recovery costs still stack up after a ransom has been paid. Several decryption keys may be required and returning recovered file systems to their original states is often expensive and difficult. 

Latest in Security
An American flag flying outside the US Capitol building against a blue sky
The FCC is creating a security council to bolster US defenses against cyberattacks
Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.
Microsoft warns about a new phishing campaign impersonating Booking.com
Ransomware
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Meta warns of worrying security flaw hitting open source type software
Hand holding smartphone and scan fingerprint biometric identity for unlock her mobile phone
Biometrics add another layer of security to passwordless authentication
Data leak
Hacked Tata Technologies data leaked by ransomware gang
Latest in News
An image of the Samsung Galaxy S25 Ultra from a hands-on event
Samsung Galaxy S26 Ultra could resurrect an intriguing camera feature
Eurocom Raptor X18
At $15,000, this massive 256GB RAM laptop makes Apple's MacBook Pro look affordable, tiny and very, very slow
Cristin Milioti in Black Mirror season 7
Netflix launches trailer for Black Mirror season 7, giving us a look at its first-ever sequel episode and an unexpected returning character
A graphic of the PC Gaming Show
Get ready for a bounty of PC games on June 8, as the PC Gaming show is back
A close up of The Daily podcast from Pocket Casts' web page
‘Podcasting shouldn’t be locked behind walled gardens’: Pocket Casts slams Spotify and makes its web player free to all
A smartphone on a sofa showing the WhatsApp, Telegram and Signal apps
Forget AI – WhatsApp is planning a simple messages feature that could be its most useful upgrade in years