Over Half of UK Organizations Pay Ransomware Demands, Yet Face Repeat Extortion

Proofpoint survey data reveals that 58% of UK organizations affected by ransomware paid the initial extortion demand. Of those who paid, 22% were targeted again by the same ransomware crews for additional extortion. The findings highlight that paying ransoms does not guarantee protection from further attacks, as threat actors frequently return for additional payments. The report focuses on UK-based organizations and was published in July 2026. No specific ransomware strains, technical attack vectors, or CVE identifiers were mentioned in the data.