--- title: Only Half of Organizations that Pay Ransomware Operators Get Their Data Back description: Only half of ransomware victims who paid ransom to have their data decrypted actually got their data back. By contrast, 87% of victims refused to pay ransom but got their data back anyway, either from backups or other means, such as specialized decryption tools. image: https://businessinsights.bitdefender.com/hubfs/33318605512_d921cc5c93_b-1.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Mar 09, 2018 # Only Half of Organizations that Pay Ransomware Operators Get Their Data Back Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/only-50-of-organizations-that-pay-ransomware-operators-get-their-data-back&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/only-50-of-organizations-that-pay-ransomware-operators-get-their-data-back&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/only-50-of-organizations-that-pay-ransomware-operators-get-their-data-back&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/only-50-of-organizations-that-pay-ransomware-operators-get-their-data-back&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/only-50-of-organizations-that-pay-ransomware-operators-get-their-data-back&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/only-50-of-organizations-that-pay-ransomware-operators-get-their-data-back&utm_medium=social&utm_source=facebook) Ransomware, the prolific [malware](https://www.bitdefender.com/business/infozone/what-is-malware.html) that locks down computer files until the victim pays to regain access, remains the fastest-growing cyber threat, targeting users from the regular Joe to entire corporate networks. In its fifth annual [Cyberthreat Defense Report](https://cyber-edge.com/CDR/), CyberEdge Group offers a mashup of perceptions from 1,200 IT security professionals in 17 countries and 19 industries. *The* key insight from this year’s report: **only half of ransomware victims who paid ransom to have their data decrypted actually got their data back**. By contrast, 87% of victims refused to pay ransom but got their data back anyway, either from backups or other means, such as specialized decryption tools. “It’s like flipping a coin twice consecutively – once to determine if your organization will be victimized by ransomware, and then, if you decide to pay the ransom, flip it again to determine if you’ll get your data back,” reads the report. Government agencies, law enforcement and security experts alike typically advise organizations that get breached to refuse to cooperate with the attackers – in the case of [ransomware](https://www.bitdefender.com/business/infozone/what-is-ransomware.html), to refrain from paying ransom for the decryption keys. Paying up encourages attackers to spread more ransomware and grow their legions, and it’s no guarantee the attackers will stick to their end of the bargain. In some cases, though, the data that’s been encrypted is so valuable that victims feel they have no choice but to flip that coin and hope for the best. Small-to-medium businesses (SMBs) are the preferred target by ransomware operators, due to weaker protection and greater willingness to pay up. In [a study](https://download.bitdefender.com/resources/files/News/CaseStudies/study/153/Ransomware-SMB-survey-crea1289-A4-en-EN-web.pdf?adobe_mc=MCMID%3D75844485696167430231514170731505923126%7CMCORGID%3D0E920C0F53DA9E9B0A490D45%2540AdobeOrg%7CTS%3D1520598042) conducted last year, Bitdefender showed that 45% of SMBs that paid to regain access to their data actually got the information back. Of those targeted, 65% were able to mitigate the attack by restoring from backup or through security software/practices. A quarter of those targeted couldn’t find a solution to address the ransomware attack and lost their data. One of Bitdefender’s pro-tips for 2018 is to [view a ransomware infection as a simple hard drive failure](https://hotforsecurity.bitdefender.com/blog/pro-tip-for-2018-treat-the-ransomware-threat-like-an-imminent-hard-drive-failure-19507.html): “Viewing ransomware as an imminent hard drive failure points toward the simplest measure you can take: keep regular, offline backups of your important data,” says Bogdan Botezatu, senior e-threat analyst, Bitdefender. “This way, even if you get infected, you can always recover your important data, whether it’s photos of your cat, or millions of dollars’ worth of intellectual property.” ### Explore More Topics - [Enterprise Security (744)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (171)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (135)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (4)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [How One Company Rebuffed Its Ransomware Aggressors and Froze Their $1M Bitcoin Wallet](https://businessinsights.bitdefender.com/how-one-company-rebuffed-its-ransomware-aggressors-and-froze-their-1m-bitcoin-wallet?hsLang=en-us) ### [Successful Ransomware Infections Surge to Record in 2020 as Victims Grow More Willing to Pay, Research Shows](https://businessinsights.bitdefender.com/successful-ransomware-infections-surge-to-record-in-2020-as-victims-grow-more-willing-to-pay-research-shows?hsLang=en-us) ### [Bitdefender Threat Debrief | January 2026](https://businessinsights.bitdefender.com/bitdefender-threat-debrief-january-2026?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "dateModified" : "2024-03-20T14:20:06.970Z", "datePublished" : "2018-03-09T15:36:44.000Z", "headline" : "Only Half of Organizations that Pay Ransomware Operators Get Their Data Back", "image" : [ "https://businessinsights.bitdefender.com/hubfs/33318605512_d921cc5c93_b-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/only-50-of-organizations-that-pay-ransomware-operators-get-their-data-back", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```