--- title: FBI Acknowledges Some Businesses Might Pay in Ransomware Attacks description: New FBI guidelines leave a bit more room for companies that choose to pay in ransomware attacks. Notifying the FBI is still a priority. image: https://businessinsights.bitdefender.com/hubfs/internet-1862312_1920.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) [#Ransomware](https://businessinsights.bitdefender.com/topic/ransomware) By [**Silviu Stahie**](https://businessinsights.bitdefender.com/author/silviu-stahie) / Oct 07, 2019 # FBI Acknowledges Some Businesses Might Pay in Ransomware Attacks Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/fbi-acknowledges-some-businesses-might-pay-in-ransomware-attacks-against-its-advice&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/fbi-acknowledges-some-businesses-might-pay-in-ransomware-attacks-against-its-advice&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/fbi-acknowledges-some-businesses-might-pay-in-ransomware-attacks-against-its-advice&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/fbi-acknowledges-some-businesses-might-pay-in-ransomware-attacks-against-its-advice&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/fbi-acknowledges-some-businesses-might-pay-in-ransomware-attacks-against-its-advice&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/fbi-acknowledges-some-businesses-might-pay-in-ransomware-attacks-against-its-advice&utm_medium=social&utm_source=facebook) While the FBI steps up its fight against ransomware, new guidelines leave a bit more room for companies that choose to pay, although the bureau says it’s still essential to notify authorities as soon as an attack takes place. Ransomware attacks are becoming more surgical, specifically targeting businesses and government institutions. Healthcare organizations are among the most vulnerable, but the ransomware threat extends much further than that. Using complex ransomware tools, criminals encrypt victims’ computers, asking for money in exchange for a decryption key. As a possible side business, hackers can even steal sensitive data as well, as part of the same operation. The FBI’s new guidelines are meant to let companies know what they should do in the event of a ransomware attack. The first item on the list is to notify authorities, but the more sensitive topic is the actual ransom. The FBI has always said firmly that ransoms must not be paid, but the bureau now acknowledges that companies might choose to pay. “Paying ransoms emboldens criminals to target other organizations and provides an alluring and lucrative enterprise to other criminals,” says the FBI in a Public Service Announcement (PSA) as an update and companion to [Ransomware PSA I-091516-PSA](https://www.ic3.gov/media/2019/191002.aspx). “However, the FBI understands that when businesses are faced with an inability to function, executives will evaluate all options to protect their shareholders, employees, and customers.” “Regardless of whether you or your organization have decided to pay the ransom, the FBI urges you to report ransomware incidents to law enforcement.” To be clear, the FBI doesn’t say it’s OK to pay the ransom, just that it’s understandable, in urgent situations. The [recent ransomware attack in Alabama](https://hotforsecurity.bitdefender.com/blog/alabama-hospitals-pay-criminals-for-decryption-key-after-ransomware-attack-21587.html), against three hospitals, is the perfect example of a critical scenario. Safeguards against any cyber-attacks include regular backups, up-to-date operating systems, software, and firmware, and the adoption of a security solution that can cover even unpatched endpoints. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [FBI Issues Warning about BEC Scams Using Cloud-based Email Services](https://businessinsights.bitdefender.com/fbi-issues-warning-about-bec-scams-using-cloud-based-email-services?hsLang=en-us) ### [Ransomware victims in the US urged to report infections, FBI warns](https://businessinsights.bitdefender.com/company-ransomware-victim-0?hsLang=en-us) ### [FBI: Businesses lost $3.1 billion in email ‘impersonation’ scams](https://businessinsights.bitdefender.com/fbi-businesses-email-impersonation-scams?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Silviu Stahie", "url" : "https://businessinsights.bitdefender.com/author/silviu-stahie" }, "dateModified" : "2021-02-08T13:45:14.165Z", "datePublished" : "2019-10-07T10:39:07.000Z", "headline" : "FBI Acknowledges Some Businesses Might Pay in Ransomware Attacks", "image" : [ "https://businessinsights.bitdefender.com/hubfs/internet-1862312_1920.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/fbi-acknowledges-some-businesses-might-pay-in-ransomware-attacks-against-its-advice", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```