A report by Proofpoint reveals that over one-third of companies who paid ransom faced another extortion demand. Hackers are no longer content with a single payment, using stolen data as leverage to extort further sums.

Security researchers have long suspected the worst; now, evidence is mounting. Companies like Klue and Change Healthcare have learned this lesson the hard way, only to face renewed threats despite paying ransoms.

The evolution of ransomware attacks means that victims are caught in a cycle of payment and continued harassment. Law enforcement data from the takedown of LockBit also supports these fears, highlighting the persistence of cybercriminals even after payments have been made.

The message is clear: paying hackers is not only futile but potentially dangerous. It’s a cycle that benefits only the criminals, who show no signs of letting up, regardless of how many times they’re paid.