Blog

Anomali Harris Poll: Ransomware Hits 1 in 5 Americans

A survey conducted by The Harris Poll revealed that roughly 1 in 5 Americans (21%) have experienced a ransomware attack on a personal and/or work device.

Joe Franscella
August 15, 2019
Table of contents
<h2 style="text-align: center;">Most Voters to Consider Candidates' Cybersecurity Records in Future Elections</h2><p>Cybercriminals have been using ransomware to profit off of unprepared victims for more than a decade. Ransomware rose to infamy when the WannaCry and NotPetya attacks struck the world. Recently, attackers have collected more than a million dollars from the Florida cities of Riviera Beach and Lake City. In July, ransomware drove <a href="http://gov.louisiana.gov/assets/EmergencyProclamations/115-JBE-2019-State-of-Emergency-Cybersecurity-Incident.pdf" target="_blank">Louisana</a> into a state of emergency.</p><p>Since the emergence of ransomware, we have learned much about how government agencies and businesses deal with it. When attacked, some organizations have  chosen to pay criminals to retrieve their data and unlock their computers. Others have decided not to give into extortion. Two organizations in particular, the FBI and <a href="http://legacy.usmayors.org/resolutions/87th_Conference/proposedcommittee-preview.asp?committee=Criminal%20and%20Social%20Justice" target="_blank">National Conference of Mayors</a>, have come out against paying off criminals.</p><p>Until now, we haven’t known much about how every-day American adults feel about this modern crime wave. To understand better how they feel, we commissioned a survey conducted online by The Harris Poll in July of 2019 among more than 2,000 U.S. adults.</p><p>One of the top findings was the number of American adults who have been touched by ransomware. The survey revealed that roughly 1 in 5 Americans (21%) have experienced a ransomware attack on a personal and/or work device. Among those who experienced an attack on a work device, 46 percent say their companies paid a ransom.</p><p><img alt="" src="https://cdn.filestackcontent.com/Xh8b2Mc1R9SsHDudlWNn"/></p><p>The survey suggested that Americans believe government and businesses alike should do more to defend against ransomware and cyberattacks, that they are willing to contribute more to the fight, and that government officials’ decisions related to cybersecurity will impact voting decisions they make in the future. Here is an in-depth look at more of what we learned:</p><p><img alt="" src="https://cdn.filestackcontent.com/BDp4rwtWSP6xiHOcdpPJ"/></p><h4><strong>Taking a Stand</strong></h4><p>The survey revealed that many Americans view cybersecurity as a priority. A large portion (87%) believe that government should consider it as such. However, only 51 percent believe the government is effectively addressing the issue.</p><p>It is probably not too surprising to learn that most Americans believe that the government should do more to defend against cybercrime. It was surprising to discover that a majority of Americans may be willing to contribute to the cause.</p><p>The survey showed that 61 percent of Americans would support a federal income tax increase to help fund government efforts to defend against cyberattacks. The breakdown for the amount of tax increase Americans would support is:</p><ul><li>25% support an increase of up to 1%</li><li>14% support an increase of up to 2%</li><li>12% support an increase of up to 3%</li><li>6% support an increase of up to 4%</li><li>5% support an increase of 5% or more</li></ul><p><img alt="" src="https://cdn.filestackcontent.com/tIKXska4RGqtVtdoSdiC"/></p><h4><strong>Empathy</strong></h4><p>Although most Americans expressed that they were generally against making ransomware payments, there are a significant amount who seem to understand that it is a difficult challenge to overcome. The survey showed:</p><ul><li>34 percent of Americans think it is at least sometimes OK for government organizations to make ransomware payments; 7 percent believe it is always OK</li><li>36 percent of Americans think it is at least sometimes OK for business organizations to make ransomware payments; 6 percent believe it is always OK</li><li>Of those who believe it is OK for businesses to make ransomware payments, the following are the top three reasons as providing cause for business to pay ransom demands: 58 percent, to protect customers’ personal information; 53 percent, to protect employees’ personal information; 49 percent, to protect the safety, wellness and life of others.</li><li>Of those who believe it is OK for government organizations to make ransomware payments, the following are the top three reasons as providing cause to government pay ransom demand: 62 percent, to protect national security; 56 percent, to protect citizens’ personal information; 53 percent, to protect confidential government information.</li></ul><h4><strong>How Anomali Helps</strong></h4><p>Anomali harnesses threat data, information, and intelligence to drive effective cyber security decisions. Our advanced platform combined with the expertise and experience of the Anomali Threat Research Team helps our customers to identify when they are under attack, who is attacking them and how to respond. With an eye on ransomware, we have recently helped the public and private sectors to detect and defend against several new ransomware campaigns. To read more about these, visit our blogs:</p><p><a href="https://www.anomali.com/blog/the-ech0raix-ransomware" target="_blank">The eCh0raix Ransomware</a></p><p><a href="https://www.anomali.com/blog/threat-actors-utilizing-ech0raix-ransomware-change-nas-targeting" target="_blank">Threat Actors Utilizing eCh0raix Ransomware Change NAS Targeting</a></p><p><strong>Survey Method</strong></p><p>This survey was conducted online within the United States by The Harris Poll on behalf of Anomali, from July 18-22, 2019 among 2,021 U.S. adults ages 18 and older, among whom 1,723 are registered voters. This online survey is not based on a probability sample and therefore no estimate of theoretical sampling error can be calculated. For complete survey methodology, including weighting variables and subgroup sample sizes please contact jfranscella@anomali.com.</p>
Joe Franscella

Joe Franscella is the former Vice President of Corporate Communications at Anomali.

Propel your mission with amplified visibility, analytics, and AI.

Learn how Anomali can help you cost-effectively improve your security posture.

August 15, 2019
-
Joe Franscella
,

Anomali Harris Poll: Ransomware Hits 1 in 5 Americans

<h2 style="text-align: center;">Most Voters to Consider Candidates' Cybersecurity Records in Future Elections</h2><p>Cybercriminals have been using ransomware to profit off of unprepared victims for more than a decade. Ransomware rose to infamy when the WannaCry and NotPetya attacks struck the world. Recently, attackers have collected more than a million dollars from the Florida cities of Riviera Beach and Lake City. In July, ransomware drove <a href="http://gov.louisiana.gov/assets/EmergencyProclamations/115-JBE-2019-State-of-Emergency-Cybersecurity-Incident.pdf" target="_blank">Louisana</a> into a state of emergency.</p><p>Since the emergence of ransomware, we have learned much about how government agencies and businesses deal with it. When attacked, some organizations have  chosen to pay criminals to retrieve their data and unlock their computers. Others have decided not to give into extortion. Two organizations in particular, the FBI and <a href="http://legacy.usmayors.org/resolutions/87th_Conference/proposedcommittee-preview.asp?committee=Criminal%20and%20Social%20Justice" target="_blank">National Conference of Mayors</a>, have come out against paying off criminals.</p><p>Until now, we haven’t known much about how every-day American adults feel about this modern crime wave. To understand better how they feel, we commissioned a survey conducted online by The Harris Poll in July of 2019 among more than 2,000 U.S. adults.</p><p>One of the top findings was the number of American adults who have been touched by ransomware. The survey revealed that roughly 1 in 5 Americans (21%) have experienced a ransomware attack on a personal and/or work device. Among those who experienced an attack on a work device, 46 percent say their companies paid a ransom.</p><p><img alt="" src="https://cdn.filestackcontent.com/Xh8b2Mc1R9SsHDudlWNn"/></p><p>The survey suggested that Americans believe government and businesses alike should do more to defend against ransomware and cyberattacks, that they are willing to contribute more to the fight, and that government officials’ decisions related to cybersecurity will impact voting decisions they make in the future. Here is an in-depth look at more of what we learned:</p><p><img alt="" src="https://cdn.filestackcontent.com/BDp4rwtWSP6xiHOcdpPJ"/></p><h4><strong>Taking a Stand</strong></h4><p>The survey revealed that many Americans view cybersecurity as a priority. A large portion (87%) believe that government should consider it as such. However, only 51 percent believe the government is effectively addressing the issue.</p><p>It is probably not too surprising to learn that most Americans believe that the government should do more to defend against cybercrime. It was surprising to discover that a majority of Americans may be willing to contribute to the cause.</p><p>The survey showed that 61 percent of Americans would support a federal income tax increase to help fund government efforts to defend against cyberattacks. The breakdown for the amount of tax increase Americans would support is:</p><ul><li>25% support an increase of up to 1%</li><li>14% support an increase of up to 2%</li><li>12% support an increase of up to 3%</li><li>6% support an increase of up to 4%</li><li>5% support an increase of 5% or more</li></ul><p><img alt="" src="https://cdn.filestackcontent.com/tIKXska4RGqtVtdoSdiC"/></p><h4><strong>Empathy</strong></h4><p>Although most Americans expressed that they were generally against making ransomware payments, there are a significant amount who seem to understand that it is a difficult challenge to overcome. The survey showed:</p><ul><li>34 percent of Americans think it is at least sometimes OK for government organizations to make ransomware payments; 7 percent believe it is always OK</li><li>36 percent of Americans think it is at least sometimes OK for business organizations to make ransomware payments; 6 percent believe it is always OK</li><li>Of those who believe it is OK for businesses to make ransomware payments, the following are the top three reasons as providing cause for business to pay ransom demands: 58 percent, to protect customers’ personal information; 53 percent, to protect employees’ personal information; 49 percent, to protect the safety, wellness and life of others.</li><li>Of those who believe it is OK for government organizations to make ransomware payments, the following are the top three reasons as providing cause to government pay ransom demand: 62 percent, to protect national security; 56 percent, to protect citizens’ personal information; 53 percent, to protect confidential government information.</li></ul><h4><strong>How Anomali Helps</strong></h4><p>Anomali harnesses threat data, information, and intelligence to drive effective cyber security decisions. Our advanced platform combined with the expertise and experience of the Anomali Threat Research Team helps our customers to identify when they are under attack, who is attacking them and how to respond. With an eye on ransomware, we have recently helped the public and private sectors to detect and defend against several new ransomware campaigns. To read more about these, visit our blogs:</p><p><a href="https://www.anomali.com/blog/the-ech0raix-ransomware" target="_blank">The eCh0raix Ransomware</a></p><p><a href="https://www.anomali.com/blog/threat-actors-utilizing-ech0raix-ransomware-change-nas-targeting" target="_blank">Threat Actors Utilizing eCh0raix Ransomware Change NAS Targeting</a></p><p><strong>Survey Method</strong></p><p>This survey was conducted online within the United States by The Harris Poll on behalf of Anomali, from July 18-22, 2019 among 2,021 U.S. adults ages 18 and older, among whom 1,723 are registered voters. This online survey is not based on a probability sample and therefore no estimate of theoretical sampling error can be calculated. For complete survey methodology, including weighting variables and subgroup sample sizes please contact jfranscella@anomali.com.</p>

Get the Latest Anomali Updates and Cybersecurity News – Straight To Your Inbox

Become a subscriber to the Anomali Newsletter
Receive a monthly summary of our latest threat intelligence content, research, news, events, and more.