Skip to content

Ransomware Attacks in Australia Drop, But Education Sector Remains Hardest Hit

Ransomware attacks in Australia decreased in 2022, but the education sector remained severely impacted. Paying the ransom led to longer recovery times and higher costs.

In this image I can see these are the first aid bags in blue and orange color.
In this image I can see these are the first aid bags in blue and orange color.

Ransomware Attacks in Australia Drop, But Education Sector Remains Hardest Hit

The Sophos' State of Ransomware 2023 report reveals a decline in ransomware attacks in Australia, with 70% of organisations surveyed being victims in 2022, down from 80% in 2021. However, the education sector remained the hardest hit, with 79% of higher education and 80% of lower education organisations affected.

Exploited vulnerabilities (37%) and compromised credentials (24%) were the most common entry points for ransomware attacks. Organisations employing between 100 and 5,000 employees were most targeted. In 69% of attacks, data was encrypted, with 53% of those paying the payment, up from 43% in 2022. In 30% of encrypted cases, data was also stolen.

Paying the payment proved costly. Organisations that did so had longer recovery times and doubled their recovery costs (US$750,000 vs US$375,000 for those using backups). Larger organisations were more likely to pay the payment, with 46% of those surveyed doing so after data encryption. To defend against ransomware, Sophos recommends strengthening defensive shields, optimising attack preparation, and maintaining good security hygiene.

While ransomware attacks in Australia decreased in 2022, the education sector remained severely impacted. Paying the payment led to longer recovery times and higher costs. To mitigate risks, organisations should prioritise robust security measures and avoid paying payments. The full report can be accessed for further insights.

Read also:

Latest