Survey: About 60% of Japanese Firms That Paid Ransomware Ransoms Failed to Recover Data

Summary
A survey of 1,107 Japanese firms found 507 had experienced ransomware attacks. Of 222 that paid, 139 did not recover their data; experts recommend updated security software and regular backups.
Key points
- Of 1,107 survey respondents, 507 reported ransomware attacks.
- At least 222 firms paid ransoms; 83 recovered their systems and data, while 139 did not.
- Another 141 affected firms reported restoring their systems and data without paying.
- About half of affected companies reported losses from ¥1 million to under ¥50 million; 4.3% reported losses of ¥1 billion or more.
- Restoration usually took one week to a month for 176 affected companies; some said their data remained unrestored after three months.
- Experts recommended keeping security software updated and regularly backing up data; the survey notes that paying does not guarantee recovery.
Article Details
- Publisher
- Kyodo
- Report Period
- January survey; year not specified
- Scope
- Ransomware experiences and recovery outcomes among Japanese companies
- Sample Size
- 1,107 responding firms
- Key Statistics
- 507 of 1,107 respondents reported ransomware attacks.
- At least 222 firms paid ransoms; 83 restored their data, while 139 did not.
- 141 firms reported restoring their systems and data without paying.
- About half of affected firms reported losses of ¥1 million to under ¥50 million; 4.3% reported losses of ¥1 billion or more.
- 176 affected firms said restoration took between one week and one month.
- Recommendations
- Do not pay ransoms; payment does not guarantee data recovery and may fund criminal organizations.
- Keep security software updated.
- Back up data regularly to minimize damage.
