Cyber attacks are becoming more frequent and more expensive because criminals are still getting paid.

Despite growing awareness, the economics of ransomware still favour attackers. Only 17% of UK organisations hit by ransomware chose to pay, but even among those who do pay, outcomes remain unreliable.

According to UK‑wide data, oranisations are now three times more likely to recover from backups than from paying a ransom. And even after payment, many victims still see their data leaked or exposed.

The uncomfortable truth: ransomware is no longer just an IT problem. It is a business risk, a financial risk, and a leadership problem.

And now there’s a new accelerant: AI is making cybercrime faster, cheaper, and more scalable. Attackers can automate phishing, generate convincing social engineering at scale, and rapidly customise malware. The barrier to entry has dropped, and the volume of attacks is rising with it.

So here’s the real question: with AI accelerating the threat landscape and ransom payments keeping the business model alive, are bad actors winning more than we're willing to admit.