India Faces Escalating Ransomware Crisis as Businesses Pay Millions in Extortion Demands
India is experiencing a surge in ransomware attacks targeting businesses, financial institutions, and public services, with companies increasingly opting to pay hefty ransoms to recover encrypted data. According to a recent report by Sophos, 65% of affected Indian organizations paid the ransom in 2024, with the average recovery cost reaching $1.35 million (€1.21 million). Ransom demands have soared, averaging $4.8 million, and 62% of attacks involved demands exceeding $1 million.
Cyber law expert Pawan Duggal attributed the rise in payments to "ransomware fatigue", noting that many companies struggle with outdated backup systems and compliance gaps, leaving them with little choice but to pay. The situation is particularly dire for Micro, Small & Medium Enterprises (MSMEs), which contribute over 40% of India’s exports and remain highly vulnerable due to limited cybersecurity resources.
Globally, ransomware is projected to inflict $265 billion in annual damages by 2031, underscoring the growing financial and operational threat to businesses worldwide. The trend in India reflects broader challenges in cybersecurity preparedness, as attackers exploit weaknesses in data protection and incident response.
Source: https://cybersecurityventures.com/india-companies-struggle-to-stop-ransomware-attacks/
Ministry Of Msme cybersecurity rating report: https://www.rankiteo.com/company/ministry-of-msme
"id": "MIN1780302727",
"linkid": "ministry-of-msme",
"type": "Ransomware",
"date": "10/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'location': 'India',
'type': 'Businesses, Financial Institutions, Public '
'Services, MSMEs'}],
'data_breach': {'data_encryption': 'Yes'},
'description': 'India is experiencing a surge in ransomware attacks targeting '
'businesses, financial institutions, and public services, with '
'companies increasingly opting to pay hefty ransoms to recover '
'encrypted data. According to a recent report by Sophos, 65% '
'of affected Indian organizations paid the ransom in 2024, '
'with the average recovery cost reaching $1.35 million (€1.21 '
'million). Ransom demands have soared, averaging $4.8 million, '
'and 62% of attacks involved demands exceeding $1 million. '
'Cyber law expert Pawan Duggal attributed the rise in payments '
"to 'ransomware fatigue,' noting that many companies struggle "
'with outdated backup systems and compliance gaps, leaving '
'them with little choice but to pay. The situation is '
'particularly dire for Micro, Small & Medium Enterprises '
'(MSMEs), which contribute over 40% of India’s exports and '
'remain highly vulnerable due to limited cybersecurity '
'resources. Globally, ransomware is projected to inflict $265 '
'billion in annual damages by 2031, underscoring the growing '
'financial and operational threat to businesses worldwide.',
'impact': {'data_compromised': 'Encrypted data',
'financial_loss': '$1.35 million (average recovery cost)'},
'lessons_learned': 'Outdated backup systems and compliance gaps contribute to '
"'ransomware fatigue,' forcing organizations to pay "
'ransoms. MSMEs are particularly vulnerable due to limited '
'cybersecurity resources.',
'motivation': 'Financial gain',
'post_incident_analysis': {'root_causes': 'Outdated backup systems, '
'compliance gaps, limited '
'cybersecurity resources '
'(especially in MSMEs)'},
'ransomware': {'data_encryption': 'Yes',
'ransom_demanded': '$4.8 million (average), $1 million+ (62% '
'of attacks)',
'ransom_paid': '65% of affected organizations'},
'references': [{'source': 'Sophos Report'}],
'title': 'India Faces Escalating Ransomware Crisis as Businesses Pay Millions '
'in Extortion Demands',
'type': 'Ransomware'}