{"id":102959,"date":"2023-10-03T09:10:00","date_gmt":"2023-10-03T16:10:00","guid":{"rendered":"https:\/\/www.backblaze.com\/blog\/?p=102959"},"modified":"2025-12-11T14:30:09","modified_gmt":"2025-12-11T22:30:09","slug":"the-true-cost-of-ransomware","status":"publish","type":"post","link":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/","title":{"rendered":"The True Cost of Ransomware"},"content":{"rendered":"<div class=\"wp-block-image\">\r\n<figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"1440\" height=\"820\" class=\"wp-image-104488\" src=\"https:\/\/www.backblaze.com\/blog\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png\" alt=\"The True Cost of Ransomware - Backblaze\" srcset=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png 1440w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware-300x171.png 300w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware-1024x583.png 1024w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware-768x437.png 768w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware-560x319.png 560w\" sizes=\"auto, (max-width: 1440px) 100vw, 1440px\" \/><\/figure>\r\n<\/div>\r\n\r\n\r\n<div class=\"wp-block-spacer\" style=\"height: 15px;\" aria-hidden=\"true\">\u00a0<\/div>\r\n\r\n\r\n\r\n<div class=\"abstract\" style=\"line-height: 1.8; margin: 24px 12px; padding: 24px 12px 10px 12px;\">\r\n<h4>Editor&#8217;s Note<\/h4>\r\n<p>This article has been updated since it was originally published in 2021.<\/p>\r\n<\/div>\r\n\r\n\r\n\r\n<p class=\"has-drop-cap\">When we first published this article, a <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/revil-ransomware-asks-70-million-to-decrypt-all-kaseya-attack-victims\/\" target=\"_blank\" rel=\"noreferrer noopener\">$70 million<\/a> ransom demand was unprecedented. Today, demands have reached as high as <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/mediamarkt-hit-by-hive-ransomware-initial-240-million-ransom\/\" target=\"_blank\" rel=\"noreferrer noopener\">$240 million<\/a>, a sum that the Hive ransomware group opened negotiations with in an attack on MediaMarkt, Europe\u2019s largest consumer electronics retailer.\u00a0<\/p>\r\n\r\n\r\n\r\n<p>But then, as now, the ransoms themselves are just a portion, and often a small portion, of the overall cost of ransomware. Ransomware attacks are crimes of opportunity, and there\u2019s a lot more opportunity in the mid-market, where the odd $1 million demand doesn\u2019t make headlines and the victims are less likely to be adequately prepared to recover. And, the cost of those recoveries is what we\u2019ll get into today.<\/p>\r\n\r\n\r\n\r\n<p>In this post, we\u2019re breaking down the true cost of ransomware and the drivers of those costs. \u00a0<\/p>\r\n\r\n\r\n\r\n<div class=\"abstract\" style=\"line-height: 1.8; margin: 24px 12px; padding: 24px 12px 10px 12px;\">\r\n<h4>Read More About Ransomware<\/h4>\r\n<p>This post is a part of our ongoing series on ransomware. Take a look at our other posts for more information on how businesses can defend themselves against a ransomware attack, important industry trends, and more.<\/p>\r\n<!--HubSpot Call-to-Action Code --><span id=\"hs-cta-wrapper-e8ce4ae3-939a-40c2-b019-6fa3300ce6f5\" class=\"hs-cta-wrapper\"><span id=\"hs-cta-e8ce4ae3-939a-40c2-b019-6fa3300ce6f5\" class=\"hs-cta-node hs-cta-e8ce4ae3-939a-40c2-b019-6fa3300ce6f5\"><!-- [if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2832298\/e8ce4ae3-939a-40c2-b019-6fa3300ce6f5\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" id=\"hs-cta-img-e8ce4ae3-939a-40c2-b019-6fa3300ce6f5\" class=\"hs-cta-img\" style=\"border-width: 0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/2832298\/e8ce4ae3-939a-40c2-b019-6fa3300ce6f5.png\" alt=\"Read About Ransomware \u2794\u00a0\" \/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(2832298, 'e8ce4ae3-939a-40c2-b019-6fa3300ce6f5', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code --><\/div>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Ransom Payments Are the First Line Item<\/h2>\r\n\r\n\r\n\r\n<p>The <a href=\"https:\/\/www.sophos.com\/en-us\/content\/state-of-ransomware\" target=\"_blank\" rel=\"noreferrer noopener\">Sophos State of Ransomware 2023<\/a> report, a survey of 3,000 IT decision makers from mid-sized organizations in 14 countries, found the average ransom payment was $1.54 million. This is almost double the 2022 figure of $812,380, and almost 10 times the 2020 average of $170,404, when we last published this article. Coveware, a security consulting firm, found that the average ransom payment for Q2 2023 was <a href=\"https:\/\/www.coveware.com\/blog\/2023\/7\/21\/ransom-monetization-rates-fall-to-record-low-despite-jump-in-average-ransom-payments\" target=\"_blank\" rel=\"noreferrer noopener\">$740,144<\/a>, also representing a big spike over previous quarters. While the specific numbers vary depending on sampling, both reports point to ransoms going up and up.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"780\" height=\"500\" class=\"wp-image-109905\" src=\"\/wp-content\/uploads\/2021\/09\/Cost-of-Ransomware_1_Coveware.png\" alt=\"A graph showing the rising trend in the cost of ransomware payments.\" srcset=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/Cost-of-Ransomware_1_Coveware.png 780w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/Cost-of-Ransomware_1_Coveware-300x192.png 300w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/Cost-of-Ransomware_1_Coveware-768x492.png 768w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/Cost-of-Ransomware_1_Coveware-560x359.png 560w\" sizes=\"auto, (max-width: 780px) 100vw, 780px\" \/>\r\n<figcaption class=\"wp-element-caption\"><a href=\"https:\/\/www.coveware.com\/blog\/2023\/7\/21\/ransom-monetization-rates-fall-to-record-low-despite-jump-in-average-ransom-payments\">Source<\/a>.<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n<div class=\"wp-block-spacer\" style=\"height: 10px;\" aria-hidden=\"true\">\u00a0<\/div>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">But, Ransoms Are Far From the Only Cost<\/h2>\r\n\r\n\r\n\r\n<p>Sophos found that the mean recovery cost excluding the ransom payment was $2.6 million when the targeted organization paid the ransom and got their data back. And, that cost was still $1.6 million when businesses used backups to restore data.<\/p>\r\n\r\n\r\n\r\n<p>The cost of recovery comes from a wide range of factors, including:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>Downtime.<\/li>\r\n\r\n\r\n\r\n<li>People hours.<\/li>\r\n\r\n\r\n\r\n<li>Investment in stronger cybersecurity protections.<\/li>\r\n\r\n\r\n\r\n<li>Repeat attacks.<\/li>\r\n\r\n\r\n\r\n<li>Higher insurance premiums.<\/li>\r\n\r\n\r\n\r\n<li>Legal defense and settlements.<\/li>\r\n\r\n\r\n\r\n<li>Lost reputation.<\/li>\r\n\r\n\r\n\r\n<li>Lost business.<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Downtime<\/h3>\r\n\r\n\r\n\r\n<p>When a company&#8217;s systems and data are compromised and operations come to a halt, the consequences are felt across the organization. Financially, downtime results in immediate revenue loss. And, productivity takes a significant hit as employees are unable to access critical resources, leading to missed deadlines and disrupted workflows. According to Coveware, <a href=\"https:\/\/www.coveware.com\/blog\/2022\/7\/27\/fewer-ransomware-victims-pay-as-medium-ransom-falls-in-q2-2022\" target=\"_blank\" rel=\"noreferrer noopener\">the average downtime in Q2 2022<\/a> (the last quarter they collected data on downtime) amounted to over three weeks (24 days). And according to Sophos, 53% of survey respondents took more than one month to recover from the attack. This time should be factored in when calculating the true cost of ransomware.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">People Hours<\/h3>\r\n\r\n\r\n\r\n<p>In the aftermath of a ransomware attack, a significant portion, if not all, of a company\u2019s resources will be channeled towards the recovery process. The IT department will be at the forefront, working around the clock to restore systems to full functionality. The marketing and communications teams will shoulder the responsibility of managing crisis communications, while the finance team may find themselves in negotiations with the ransomware perpetrators. Meanwhile, human resources will be addressing employee inquiries and concerns stemming from the incident. Calculating the total hours spent on recovery may not be possible, but it\u2019s a factor to consider in planning.<\/p>\r\n\r\n\r\n\r\n<p>After recovery, the long term effects of a cybersecurity breach can still be felt in the workforce. In a study of the mental health impacts of cybersecurity on employees, Northwave found that physical and mental health symptoms were still existent <a href=\"https:\/\/www.persberichten.com\/Bestanden\/Bedrijven\/6375\/bijlages\/Northwave%20Research%20-%20After%20the%20crisis%20comes%20the%20blow%20-%20The%20mental%20impact%20of%20ransomware%20attacks.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">up to a year after the cybersecurity attack<\/a>, and affected both employee morale and business goals.\u00a0<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Investment in Stronger Cybersecurity Protections<\/h3>\r\n\r\n\r\n\r\n<p>It is highly probable that a company will allocate a greater portion of its budget towards bolstering its cybersecurity measures after being attacked by ransomware, and rightfully so. It\u2019s a prudent and necessary response. As attacks continue to increase in frequency, <a href=\"\/blog\/what-is-cyber-insurance\/\" target=\"_blank\" rel=\"noreferrer noopener\">cyber insurance providers<\/a> will continue to tighten requirements for coverage. In order to maintain coverage, companies will need to bring systems up to speed.<\/p>\r\n\r\n\r\n<div class=\"wp-block-image\">\r\n<figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"1440\" height=\"820\" class=\"wp-image-102966\" title=\"Stronger Cybersecurity Protections\" src=\"https:\/\/www.backblaze.com\/blog\/wp-content\/uploads\/2021\/09\/image7.png\" alt=\"man working on a laptop with a ransomware demand message\" srcset=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/image7.png 1440w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/image7-300x171.png 300w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/image7-1024x583.png 1024w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/image7-768x437.png 768w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/image7-560x319.png 560w\" sizes=\"auto, (max-width: 1440px) 100vw, 1440px\" \/><\/figure>\r\n<\/div>\r\n\r\n\r\n<div class=\"wp-block-spacer\" style=\"height: 10px;\" aria-hidden=\"true\">\u00a0<\/div>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Repeat Attacks<\/h3>\r\n\r\n\r\n\r\n<p>One of the cruel realities of being attacked by ransomware is that it makes businesses a target for repeat attacks. Unsurprisingly, cybercriminals don\u2019t always keep their promises when companies pay ransoms. In fact, paying ransoms lets cybercriminals know you\u2019re an easy future mark. They know you\u2019re willing to pay.<\/p>\r\n\r\n\r\n\r\n<p>Repeat attacks happen when the vulnerability that allowed cybercriminals access to systems remained susceptible to exploitation. Copycat ransomware operators can easily exploit vulnerabilities that go unaddressed even for a few days.\u00a0<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Higher Insurance Premiums<\/h3>\r\n\r\n\r\n\r\n<p>As more and more companies file claims for ransomware attacks and recoveries and ransom demands continue to increase, insurers are upping their premiums. In essence, insurers have been confronted with the stark reality that the financial toll exacted by ransomware incidents far exceeds what was once anticipated. In response to this growing financial strain, insurance providers are left with little choice but to raise their premiums. This uptick in premiums reflects the increasing risk landscape of the digital age, where the ever-evolving tactics and sophistication of cybercriminals necessitate a recalibration of risk assessment models and pricing structures within the insurance industry.\u00a0<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Legal Defense and Settlements<\/h3>\r\n\r\n\r\n\r\n<p>When attacks affect consumers or customers, victims can expect to hear from the lawyers. After a 2021 ransomware attack, payroll services provider UKG agreed to a <a href=\"https:\/\/www.cybersecuritydive.com\/news\/ukg-settles-6M-lawsuit-ransomware-attack\/688265\/\" target=\"_blank\" rel=\"noreferrer noopener\">$6 million settlement<\/a>. And, big box stores like Target and Home Depot both paid settlements in the tens of millions of dollars following breaches. Even if your information security practices would hold up in court, for most companies, it\u2019s cheaper to settle than to suffer a protracted legal battle.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\">Lost Reputation and Lost Business<\/h3>\r\n\r\n\r\n\r\n<p>When ransomware attacks make headlines and draw public attention, they can erode trust among customers, partners, and stakeholders. The perception that a company&#8217;s cybersecurity measures were insufficient to protect sensitive data and systems can lead to a loss of credibility. Customers may question the safety of their personal information.\u00a0<\/p>\r\n\r\n\r\n\r\n<p>Rebuilding a damaged reputation is a challenging and time-consuming process, requiring transparent communication, proactive security improvements, and a commitment to regaining trust. Ultimately, the impact of reputation loss goes beyond financial losses, as it can significantly affect an organization&#8217;s long-term viability and competitiveness in the market.<\/p>\r\n\r\n\r\n<div class=\"wp-block-image\">\r\n<figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"1440\" height=\"820\" class=\"wp-image-98195\" src=\"https:\/\/www.backblaze.com\/blog\/wp-content\/uploads\/2021\/05\/blog-security-reminder-1.jpg\" alt=\"lock over an image of a woman working on a computer\" srcset=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/05\/blog-security-reminder-1.jpg 1440w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/05\/blog-security-reminder-1-300x171.jpg 300w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/05\/blog-security-reminder-1-1024x583.jpg 1024w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/05\/blog-security-reminder-1-768x437.jpg 768w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/05\/blog-security-reminder-1-560x319.jpg 560w\" sizes=\"auto, (max-width: 1440px) 100vw, 1440px\" \/><\/figure>\r\n<\/div>\r\n\r\n\r\n<div class=\"wp-block-spacer\" style=\"height: 10px;\" aria-hidden=\"true\">\u00a0<\/div>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">What You Can Do About It: Defending Against Ransomware<\/h2>\r\n\r\n\r\n\r\n<p>The business of ransomware is booming with no signs of slowing down, and the cost of recovery is enough to put some ill-prepared companies out of business. If it feels like the cost of a <a href=\"https:\/\/www.backblaze.com\/cloud-storage\/solutions\/ransomware-readiness-and-recovery\" target=\"_blank\" rel=\"noreferrer noopener\">ransomware recovery<\/a> is out of reach, that\u2019s all the more reason to invest in harder security protocols and <a href=\"\/blog\/server-backup-101-disaster-recovery-planning\/\" target=\"_blank\" rel=\"noreferrer noopener\">disaster recovery planning<\/a> sooner rather than later.<\/p>\r\n\r\n\r\n\r\n<div class=\"abstract\" style=\"line-height: 1.8; margin: 24px 12px; padding: 24px 12px 10px 12px;\">\r\n<p>For more information on the ransomware economy, the threat small to mid-sized businesses (SMBs) are facing, and steps you can take to protect your business, download <a href=\"https:\/\/hub.backblaze.com\/complete-guide-to-ransomware\" target=\"_blank\" rel=\"noopener\">The Complete Guide to Ransomware.<\/a><\/p>\r\n<!--HubSpot Call-to-Action Code --><span id=\"hs-cta-wrapper-8a341850-8a10-47df-915e-68a20860d249\" class=\"hs-cta-wrapper\"><span id=\"hs-cta-8a341850-8a10-47df-915e-68a20860d249\" class=\"hs-cta-node hs-cta-8a341850-8a10-47df-915e-68a20860d249\"><!-- [if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2832298\/8a341850-8a10-47df-915e-68a20860d249\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" id=\"hs-cta-img-8a341850-8a10-47df-915e-68a20860d249\" class=\"hs-cta-img\" style=\"border-width: 0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/2832298\/8a341850-8a10-47df-915e-68a20860d249.png\" alt=\"Download the Ransomware Guide \u2794\u00a0\" \/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(2832298, '8a341850-8a10-47df-915e-68a20860d249', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code --><\/div>\r\n\r\n\r\n\r\n<h4 class=\"wp-block-heading\">Cost of Ransomware FAQs<\/h4>\r\n\r\n\r\n\r\n<div class=\"schema-faq wp-block-yoast-faq-block\">\r\n<div id=\"faq-question-1696343739636\" class=\"schema-faq-section\"><strong class=\"schema-faq-question\">1. What is the highest ransomware ransom ever demanded?<br \/><\/strong>\r\n<p class=\"schema-faq-answer\">Today, ransom demands have reached as high as $240 million, a sum demanded by the Hive ransomware group in an attack on MediaMarkt, Europe\u2019s largest consumer electronics retailer.<\/p>\r\n<\/div>\r\n<div id=\"faq-question-1696343770039\" class=\"schema-faq-section\"><strong class=\"schema-faq-question\">2. What is the average ransom payment in 2023?<br \/><\/strong>\r\n<p class=\"schema-faq-answer\">Average ransom payments vary depending on how reporting entities sample data. Some estimates put the average ransom payment in 2023 in the hundreds of thousands of dollars up to over half a million dollars.<\/p>\r\n<\/div>\r\n<div id=\"faq-question-1696343791155\" class=\"schema-faq-section\"><strong class=\"schema-faq-question\">3. How much does ransomware recovery cost?<br \/><\/strong>\r\n<p class=\"schema-faq-answer\">Ransomware recovery can easily cost in the multiple millions of dollars. The cost of recovery comes from a wide range of factors, including downtime, people hours, investment in stronger cybersecurity protections, repeat attacks, higher insurance premiums, legal defense, lost reputation, and lost business.<\/p>\r\n<\/div>\r\n<div id=\"faq-question-1696343809751\" class=\"schema-faq-section\"><strong class=\"schema-faq-question\">4. How long does ransomware recovery take?<br \/><\/strong>\r\n<p class=\"schema-faq-answer\">When a company&#8217;s systems and data are compromised, and operations come to a halt, the consequences are felt across the organization. Ransomware recovery can take anywhere from a few days, if you\u2019re well prepared, or up to six months or longer.\u00a0<\/p>\r\n<\/div>\r\n<\/div>\r\n","protected":false},"excerpt":{"rendered":"<p>Cybercriminals&#8217; ransom demands continue to rise, but these are just one part of the overall cost of a ransomware attack. Learn more about what&#8217;s driving the true cost of ransomware.<\/p>\n","protected":false},"author":159,"featured_media":104488,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[7,434,475],"tags":[468],"class_list":["post-102959","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-storage","category-featured-1","category-ransomware","tag-b2cloud","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>The Average Cost of Ransomware and the True Cost of an Attack<\/title>\n<meta name=\"description\" content=\"Cybercriminals&#039; ransom demands continue to rise, but these are just one part of the overall cost of a ransomware attack. Learn more about what&#039;s driving the true cost of ransomware.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Average Cost of Ransomware and the True Cost of an Attack\" \/>\n<meta property=\"og:description\" content=\"Cybercriminals&#039; ransom demands continue to rise, but these are just one part of the overall cost of a ransomware attack. Learn more about what&#039;s driving the true cost of ransomware.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"Backblaze Blog | Cloud Storage &amp; Cloud Backup\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/backblaze\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-03T16:10:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-11T22:30:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"820\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Molly Clancy\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@backblaze\" \/>\n<meta name=\"twitter:site\" content=\"@backblaze\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Molly Clancy\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Average Cost of Ransomware and the True Cost of an Attack","description":"Cybercriminals' ransom demands continue to rise, but these are just one part of the overall cost of a ransomware attack. Learn more about what's driving the true cost of ransomware.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/","og_locale":"en_US","og_type":"article","og_title":"The Average Cost of Ransomware and the True Cost of an Attack","og_description":"Cybercriminals' ransom demands continue to rise, but these are just one part of the overall cost of a ransomware attack. Learn more about what's driving the true cost of ransomware.","og_url":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/","og_site_name":"Backblaze Blog | Cloud Storage &amp; Cloud Backup","article_publisher":"https:\/\/www.facebook.com\/backblaze","article_published_time":"2023-10-03T16:10:00+00:00","article_modified_time":"2025-12-11T22:30:09+00:00","og_image":[{"width":1440,"height":820,"url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png","type":"image\/png"}],"author":"Molly Clancy","twitter_card":"summary_large_image","twitter_creator":"@backblaze","twitter_site":"@backblaze","twitter_misc":{"Written by":"Molly Clancy","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#article","isPartOf":{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/"},"author":{"name":"Molly Clancy","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/a92e54b3011e599a575611dbbb443b5c"},"headline":"The True Cost of Ransomware","datePublished":"2023-10-03T16:10:00+00:00","dateModified":"2025-12-11T22:30:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/"},"wordCount":1342,"commentCount":0,"publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png","keywords":["B2Cloud"],"articleSection":["Cloud Storage","Featured","Ransomware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#respond"]}]},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/","url":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/","name":"The Average Cost of Ransomware and the True Cost of an Attack","isPartOf":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#primaryimage"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png","datePublished":"2023-10-03T16:10:00+00:00","dateModified":"2025-12-11T22:30:09+00:00","description":"Cybercriminals' ransom demands continue to rise, but these are just one part of the overall cost of a ransomware attack. Learn more about what's driving the true cost of ransomware.","breadcrumb":{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343739636"},{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343770039"},{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343791155"},{"@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343809751"}],"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#primaryimage","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png","width":1440,"height":820,"caption":"The True Cost of Ransomware - Backblaze"},{"@type":"BreadcrumbList","@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/"},{"@type":"ListItem","position":2,"name":"The True Cost of Ransomware"}]},{"@type":"WebSite","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","name":"Backblaze Cloud Solutions Blog","description":"Cloud Storage &amp; Cloud Backup","publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization","name":"Backblaze","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"Backblaze"},"image":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/backblaze","https:\/\/x.com\/backblaze","https:\/\/www.youtube.com\/user\/Backblaze","https:\/\/en.wikipedia.org\/wiki\/Backblaze"]},{"@type":"Person","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/a92e54b3011e599a575611dbbb443b5c","name":"Molly Clancy","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/02\/ClancyMolly_Headshot_reduced-150x150.png","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/02\/ClancyMolly_Headshot_reduced-150x150.png","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/02\/ClancyMolly_Headshot_reduced-150x150.png","caption":"Molly Clancy"},"description":"Molly Clancy is a content writer who specializes in explaining tech concepts in an easy, approachable way. With more than 15 years of experience, she has a broad background in industries ranging from B2B tech to engineering to luxury travel. A deep curiosity drives her repeated success explaining what terms like OS kernel and preflight request mean so that anyone can understand them.","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/author\/molly\/"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343739636","position":1,"url":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343739636","name":"1. What is the highest ransomware ransom ever demanded?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Today, ransom demands have reached as high as $240 million, a sum demanded by the Hive ransomware group in an attack on MediaMarkt, Europe\u2019s largest consumer electronics retailer.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343770039","position":2,"url":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343770039","name":"2. What is the average ransom payment in 2023?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Average ransom payments vary depending on how reporting entities sample data. Some estimates put the average ransom payment in 2023 in the hundreds of thousands of dollars up to over half a million dollars.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343791155","position":3,"url":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343791155","name":"3. How much does ransomware recovery cost?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Ransomware recovery can easily cost in the multiple millions of dollars. The cost of recovery comes from a wide range of factors, including downtime, people hours, investment in stronger cybersecurity protections, repeat attacks, higher insurance premiums, legal defense, lost reputation, and lost business.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343809751","position":4,"url":"https:\/\/www.backblaze.com\/blog\/the-true-cost-of-ransomware\/#faq-question-1696343809751","name":"4. How long does ransomware recovery take?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"When a company's systems and data are compromised, and operations come to a halt, the consequences are felt across the organization. Ransomware recovery can take anywhere from a few days, if you\u2019re well prepared, or up to six months or longer.\u00a0<br\/>","inLanguage":"en-US"},"inLanguage":"en-US"}]}},"jetpack_featured_media_url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2021\/09\/bb-bh-The-True-Cost-of-Ransomware.png","_links":{"self":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/102959","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/users\/159"}],"replies":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/comments?post=102959"}],"version-history":[{"count":0,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/102959\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media\/104488"}],"wp:attachment":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media?parent=102959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/categories?post=102959"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/tags?post=102959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}