- The new research claims that the downtime of ransomware attacks cost thousands of government agencies
- The average stop time after an attack is more than 27 days
- Ransomhub is the upper offender
New research from Comarch has stressed that an underestimated key aspect of ransomware costs government agencies thousands of dollars a day – downtime.
Of the more than 1,000 confirmed ransomware attacks followed, almost a month’s downtime was lost per attack on average, costing nearly $ 84,000 per day.
For government agencies, the average stop time is higher than other sectors, with health care on average 16 days and 12 days for manufacturers. Although less than half of all ransomware incidents end in payment, the total amount paid in previous years has reached more than a billion dollars, so that attacks can be very expensive.
Key targets
Research indicates that government entities are less equipped to overcome attacks, probably budgetary constraints leading to longer recovery times.
On average, the attackers demanded $ 2.2 million in ransoms, but it is very rarely confirmed whether a ransom is paid or not – and certain governments such as the United Kingdom have launched proposals that would effectively prohibit the organizations of state managers to pay ransoms in order to dissuade groups from targeting them.
But that does not stop attackers, government agencies frequently exceeding the list of the most popular targets.
Critical infrastructure organizations are increasingly threatened with geopolitically geopolitical motivation attacks, seek to disrupt service providers and undermine confidence in public institutions.
The report underlines that the notorious Ransomhub group is responsible for stealing the most data, with more than 730,000 recordings made since 2018. Close behind them is AlphV with 700,000, and a brain figure with 650,000 stolen recordings.
Although it is a fairly new group, Ransomhub continues to succeed in attacking public and private organizations, the group claiming to have been the victim of Metlife earlier in 2025.