Highlights from the 2021 Unit 42 Ransomware Threat Report
Summary: Unit 42 and The Crypsis Group analyzed 2020 ransomware data from the U.S., Canada and Europe and found the average ransom paid rose from $115,123 in 2019 to $312,493 in 2020, a 171% year-over-year increase, while the highest ransom paid doubled from $5 million to $10 million. The highest demand grew from $15 million across 2015-2019 to $30 million in 2020, healthcare was the most targeted vertical, and at least 16 variants threatened data exposure, with NetWalker leaking data from 113 victims between January 2020 and January 2021 before the DOJ disrupted the gang.
What you should know: The average ransom more than tripled in a single year and the top demand hit $30 million, and operators targeted healthcare specifically because locked systems meant patients could not be treated. NetWalker alone published data from 113 victim organizations, so the question is not only whether you can restore from backup but whether you can keep stolen data from being leaked.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026