‘Your Data is Stolen and Encrypted’: The Ransomware Victim Experience

This report by the Royal United Services Institute (RUSI) examines the growing threat of ransomware and its impact on victims, offering deep insights into how organizations and individuals experience and cope with ransomware attacks. Drawing on a 12-month research project funded by the UK's National Cyber Security Centre (NCSC) and the Research Institute for Sociotechnical Cyber Security, the report focuses on the personal and organizational challenges victims face. It highlights key factors such as the timing of attacks, organizational size, pre-incident preparation, and workplace culture. The study emphasizes the critical role of government, law enforcement, and external support services in responding to ransomware incidents. The report also discusses the psychological toll ransomware takes on victims and offers policy recommendations to minimize harm.