Ransomware victims that that did not pay a ransom reported, on average, $730,000 in recovery costs. The average total cost – including the ransom amount – of $1.4 million, according to a survey by Sophos. The study found that over the prior 12 months, 51% of organizations reported experiencing a “significant” ransomware attack, of which 73% resulted in attackers successfully encrypting data. Security experts say that rather than paying for cleanup, organizations should spend the money on prevention.”]
Source: https://www.cuinfosecurity.com/blogs/ransomware-reminder-paying-ransoms-doesnt-pay-p-2901