Japanese firms: Over 200 Japanese Firms Paid Ransomware Attackers, 60 Per Cent fail To Recover Data

Over 200 Japanese Firms Paid Ransomware Attackers Most Failed to Recover Data

A recent survey by the Japan Institute for Promotion of Digital Economy and Community reveals that ransomware attacks have severely impacted Japanese businesses, with 507 of 1,107 responding firms reporting incidents. Of those targeted, 222 companies paid ransoms, yet 60% still could not restore their data, highlighting the risks of complying with attackers’ demands.

The survey, conducted in January, found that 141 firms recovered their systems without paying, while only 83 of the 222 ransom-paying companies successfully regained access. Financial losses varied widely: half of affected businesses incurred costs between 1 million yen ($6,300) and 50 million yen, while 4.3% faced damages exceeding 1 billion yen. Another 16% reported minimal or no financial impact.

The findings underscore a critical reality: paying ransoms does not guarantee data recovery and may further fund criminal operations. The report serves as a stark reminder of the persistent threat ransomware poses to corporate cybersecurity.

Source: https://www.bernama.com/misc/rss/news.php/news.php?id=2547046

Nikkei Asia cybersecurity rating report: https://www.rankiteo.com/company/nikkeiasia

"id": "NIK1776752855",
"linkid": "nikkeiasia",
"type": "Ransomware",
"date": "1/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'location': 'Japan', 'type': 'Business firms'}],
 'data_breach': {'data_encryption': 'Yes'},
 'description': 'A recent survey by the Japan Institute for Promotion of '
                'Digital Economy and Community reveals that ransomware attacks '
                'have severely impacted Japanese businesses, with 507 of 1,107 '
                'responding firms reporting incidents. Of those targeted, 222 '
                'companies paid ransoms, yet 60% still could not restore their '
                'data, highlighting the risks of complying with attackers’ '
                'demands.',
 'impact': {'data_compromised': 'Data encryption and potential data '
                                'exfiltration',
            'financial_loss': ['1 million yen - 50 million yen ($6,300 - '
                               '$315,000) for 50% of affected businesses',
                               'Exceeding 1 billion yen for 4.3% of affected '
                               'businesses',
                               'Minimal or no financial impact for 16%'],
            'operational_impact': 'Inability to restore data for 60% of '
                                  'ransom-paying firms'},
 'lessons_learned': 'Paying ransoms does not guarantee data recovery and may '
                    'further fund criminal operations.',
 'motivation': 'Financial gain',
 'ransomware': {'data_encryption': 'Yes',
                'ransom_paid': 'Yes (by 222 companies)'},
 'references': [{'source': 'Japan Institute for Promotion of Digital Economy '
                           'and Community'}],
 'response': {'recovery_measures': '141 firms recovered systems without paying '
                                   'ransom'},
 'title': 'Over 200 Japanese Firms Paid Ransomware Attackers; Most Failed to '
          'Recover Data',
 'type': 'Ransomware'}