{"id":4479,"date":"2021-06-16T10:00:33","date_gmt":"2021-06-16T15:00:33","guid":{"rendered":"https:\/\/www.stratospherenetworks.com\/blog\/?p=4479"},"modified":"2021-06-17T11:03:06","modified_gmt":"2021-06-17T16:03:06","slug":"the-ransomware-crisis-what-smbs-can-take-away-from-recent-attacks-on-big-businesses","status":"publish","type":"post","link":"https:\/\/www.stratospherenetworks.com\/blog\/the-ransomware-crisis-what-smbs-can-take-away-from-recent-attacks-on-big-businesses\/","title":{"rendered":"The Ransomware Crisis: What SMBs Can Take Away From Recent Attacks on Big Businesses"},"content":{"rendered":"

\"AIt\u2019s impossible to check the news lately without hearing about ransomware<\/a>. Recent attacks have disrupted the distribution of jet fuel and gasoline to the East Coast of the U.S. and halted production for the world\u2019s largest meat supplier, according to The New York Times<\/a>.<\/p>\n

In the wake of these devastating assaults on vital infrastructure, Anne Neuberger, the deputy national security advisor for cyber and emerging technologies on the National Security Council, has issued an open letter to U.S. business leaders urging them to take immediate action to protect themselves against ransomware.<\/p>\n

\u201cAll organizations must recognize that no company is safe from being targeted by ransomware, regardless of size or location,\u201d Neuberger wrote<\/a>.<\/p>\n

The Rise of Ransomware and Its Devastating Fallout<\/h2>\n

The first ransomware campaign<\/a> \u2013 perpetrated by the evolutionary biologist Dr. Joseph Popp \u2013 involved floppy disks distributed by mail in 1989, according to a CSO article on the history of ransomware<\/a>. In the decades since its birth, this type of malware has become one of the most widespread and well-known cybersecurity threats in the world.<\/p>\n

A 2020 survey of 5,000 IT managers across 26 countries found that 51 percent of respondents reported getting hit by ransomware during the previous year, according to The State of Ransomware 2020 report<\/a> from Sophos. Worldwide, the report states it costs $761,106 on average to remediate a ransomware attack, taking into account factors such as downtime, people time, lost opportunities, network- and device-associated costs, and ransom payments.<\/p>\n

Colonial Pipeline Co. CEO Joseph Blount disclosed to the Wall Street Journal<\/a> that his organization paid a ransom of $4.4 million. In response to another recent attack, the insurer CNA Financial handed over approximately $40 million to cybercriminals to decrypt the firm\u2019s data, according to MSSP Alert<\/a>.<\/p>\n

The decision to pay the ransom is a controversial one, as the FBI discourages cooperating with criminals so as not to incentivize their behavior, according to The New Yorker<\/a>. Still, victims facing extended downtime and the prospect of months of work to reconstruct their systems might feel giving in to the hackers\u2019 demands is the least damaging option. For instance, after refusing to pay a $50,000 ransom in 2018, the city of Atlanta subsequently spent upwards of $2 million on recovery efforts such as digital forensics and crisis-focused public relations, The New Yorker states.<\/p>\n

However, in general, paying the ransom roughly doubles the overall average cost of bouncing back from a ransomware incident from $732,520 to $1.45 million, according to Sophos. The State of Ransomware 2020 report notes that \u201cthe costs to recover the data and get things back to normal are likely to be the same whether you get the data back from the criminals or from your backups. But if you pay the ransom, you\u2019ve got another big cost on top.\u201d<\/p>\n

In the case of the Colonial Pipeline, the Department of Justice tracked down and recovered most of the ransom payment, according to CBS News<\/a>. However, successful ransom recovery is rare, and it\u2019s unlikely that the federal government will go to the same lengths for small businesses that experience similar cyberattacks.<\/p>\n

Additionally, the ransom money is typically only a minor portion of the total costs of a ransomware incident. You need to account for network downtime, business interruption, reputation damage, lost customers, recovery expenses and so on. Companies that fall victim to ransomware infections can also face regulatory penalties (especially if sensitive data gets leaked in the process, as some hackers threaten to do<\/a> if they don\u2019t get their money).<\/p>\n

SMBs and Ransomware: What Smaller Companies Can Do to Avoid Disaster<\/h2>\n

The recent spate of high-profile attacks has included not only the Colonial Pipeline and the meat supplier JBS but also the Steamship Authority of Massachusetts, Infosecurity<\/a> states. On Tuesday, June 1, ransomware also struck the Tokyo headquarters of the multi-national conglomerate Fujifilm, according to TechCrunch<\/a>.<\/p>\n

Based on that list of targets and headlines about ransomware in general, you might think that hackers only go after big game to maximize their profits. However, small and midsize businesses (SMBs) don\u2019t fly under the radar: In Sophos\u2019s survey, 47 percent of organizations with 100 to 1,000 employees got hit by ransomware, compared to 54 percent of those with 1,001 to 5,000 staff members.<\/p>\n

Hackers set their sights on SMBs just as commonly as they go after large enterprises. And if multi-national corporations with plenty of resources at their disposal to devote to cybersecurity are still getting hit, that speaks volumes about the severity of the situation for smaller organizations without as much access to advanced IT security solutions<\/a>.<\/p>\n

Fortunately, SMBs can reduce their risk of experiencing ransomware infections and other types of cyberattacks by working with a third-party managed security service provider (MSSP). For a fraction of the cost of maintaining an in-house security department, an MSSP can provide and manage advanced risk-reducing solutions:<\/p>\n