Nearly half of companies hit by ransomware pay the ransom, according to Sophos 2025 research, while median demands keep climbing. The UK is moving to ban payouts by public‑sector bodies and critical‑infrastructure operators such as the NHS and schools. Haydn Brooks, CEO of Risk Ledger, describes the 2026 ransomware landscape as a highly sophisticated, corporate‑style ecosystem.

AI‑driven tools like Worm GPT have fueled a 389% rise in confirmed victims to 7,831 globally in 2025, says Dave Spillane of Fortinet. Attack costs have dropped, making sophisticated strikes cheap, while defense spending rises. Jim Walter of Sentinel One argues that paying only strengthens the criminal ecosystem and rarely guarantees data recovery.

Critics of payment bans warn they could endanger essential services; Andy Maus of Drive Savers notes that bans in North Carolina and Florida have not materially deterred attacks. Gavin Millard of Tenable urges focus on exposure management, and Spencer Young of Delinea stresses strong access controls. Some experts call for government‑backed backup subsidies rather than outright payment prohibitions.