Average Ransom Payment for Canadian Organizations More Than C$450,000, According to New Palo Alto Networks Survey

Of the Canadian businesses hit by ransomware, a majority (58%) of IT decision-makers say their organization paid a ransom, with 14% saying their organization paid more than once

TORONTO, Dec. 8, 2021 /CNW/ -- Palo Alto Networks (NASDAQ: PANW), the global cybersecurity leader, today announced the results of a new study conducted by Angus Reid, which found that ransomware attacks have been costly for Canadian organizations. The study found that the average ransom paid by Canadian organizations was more than C$450,000 (C$458,247).

Additionally, the average ransom demanded was nearly C$450,000 (C$449,868). Payments trended higher than demands, given that respondents provided separate answers for each question (i.e., how much a ransom was demanded did not relate to how much a ransom was paid).

The survey of IT decision-makers at companies with 100 to 1,000 employees, conducted by Angus Reid (Canada's leading market research firm), highlights the breadth of the ransomware pandemic. The study found that ransomware attacks are plaguing Canadian organizations, as 55% of IT decision-makers say their organization has been the victim of a ransomware attack, with one in five (20%) saying they have been attacked more than once. Of these Canadian businesses hit by ransomware, a majority (58%) say their organization paid a ransom, with 14% saying their organization paid more than once.

"Ransomware gangs are not discriminating against the size or type of business they're targeting, so all Canadian organizations must be prepared," said Ivan Orsanic, regional vice president and Canada country manager at Palo Alto Networks. "Stopping ransomware attacks requires businesses to be proactive and have the right security strategy in place to prevent attacks, and to lessen the impact of an attack and speed up recovery if breached. "

The long-term effects of ransomware attacks can be devastating for Canadian organizations if they're victims. While 41% of businesses hit with a ransomware attack were able to recover within a month, according to the study, more than half (58%) say that it took more than a month to recover; 29% say it took more than three months; and 9% say it took more than five to six months.

Preparation is key to not only preventing an attack but also helping to minimize the impact of a successful attack. For example, Canadian organizations that recover quickly are ones that generally didn't have to pay a ransom. The survey found that nearly half of Canadian organizations (46%) that didn't pay a ransom were able to recover from an attack within a week, which suggests these were organizations that were prepared and had backup systems in place. Another possibility is that the attack wasn't severe enough to warrant paying.

"This data clearly shows the high degree of danger that companies across Canada face from ransomware," said Demetre Eliopoulos, senior vice president of Public Affairs at Angus Reid. "Given the high prevalence of attacks and the extent to which companies are financially and operationally crippled, no one has the luxury to be complacent on this issue " 

"Ransomware, today, is one of the biggest business risks to Canadian organizations. It is no longer a question of 'if' but 'when' and organizations of all sizes and industries must prepare in advance for this threat," said Yogesh Shivhare, lead cybersecurity analyst at IDC Canada.

For more information:

• To learn more about the 2021 Palo Alto Networks Canada Ransomware Barometer, please visit this page.
• To learn more about how the Unit 42 Security Consulting group helps Canadian organizations protect against ransomware attacks, please visit this page.

Survey Methodology 
In partnership with Palo Alto Networks, Angus Reid conducted an online survey among a representative sample of 1,015 business and IT decision-makers in organizations with 100 to 1,000 employees, in the week of September 6, 2021. The respondents are members of the Angus Reid Business Advisory Network. For comparison purposes only, this sample plan would carry a margin of error of +/- 3.1 percentage points 19 times out of 20 for business leaders.

About Angus Reid
Angus Reid is Canada's most well-known and respected name in opinion and market research data. Offering a variety of research solutions to organizations across North America, the Angus Reid team connects technologies and people to derive powerful insights that inform your decisions. Data is collected through a suite of tools utilizing the latest technologies. Prime among that is the Angus Reid Forum, an opinion community consisting of engaged residents across the country who answer surveys on topical issues that matter to everyone. Within this community sits the Business Advisory Network, a highly engaged community of B2B professionals comprised of decision makers in the financial sector, IT professionals, education, trades and other B2B sectors. This community is diverse, accurate and delivers reliable business intelligence for your organization's biggest decisions.

About Palo Alto Networks 
Palo Alto Networks, the global cybersecurity leader, is shaping the cloud-centric future with technology that is transforming the way people and organizations operate. Our mission is to be the cybersecurity partner of choice, protecting our digital way of life. We help address the world's greatest security challenges with continuous innovation that seizes the latest breakthroughs in artificial intelligence, analytics, automation, and orchestration. By delivering an integrated platform and empowering a growing ecosystem of partners, we are at the forefront of protecting tens of thousands of organizations across clouds, networks, and mobile devices. Our vision is a world where each day is safer and more secure than the one before. For more information, visit www.paloaltonetworks.com.

SOURCE Palo Alto Networks, Inc.

[email protected]