“In fact, 80% of organizations that paid the ransom were hit by a second attack, and almost half were hit by the same threat group.”
Paying the ransom doesn’t end the attack. It puts you on a list of customers who pay. A quarter of victims in the study closed the business entirely. The numbers come from a security vendor that sells ransomware defense, but the logic holds without them.