Ransomware on the Rise: 69% of Businesses Hit, 27% Attacked Twice

Australian businesses, take note: ransomware attacks are becoming more frequent, more sophisticated, and increasingly difficult to defend against—especially for small and medium-sized enterprises (SMEs).

The Legal Practice Board of Western Australia recently confirmed it was breached by the Dire Wolf ransomware group, underscoring a growing global trend. According to Delinea’s 2025 State of Ransomware Report, a staggering 69% of organisations worldwide have been hit by ransomware in the past year, with over a quarter (27%) targeted more than once.

“Ransomware has evolved into a shape-shifting, AI-enabled threat that no business can afford to underestimate,” says Art Gilliland, CEO at Delinea.

AI: The Game-Changer for Attackers and Defenders

Artificial intelligence is fuelling the next generation of ransomware attacks. The report warns that AI is automating every stage of the attack process—from phishing emails and deepfakes to data theft and extortion—making breaches faster and harder to detect.

Yet AI is also a critical tool for defence. 90% of organisations are now using AI in their cybersecurity strategies, from detecting threats to analysing attack patterns. Still, the gap remains: while AI can enhance defences, many businesses lack basic security measures. For example, only 34% enforce least privilege access controls, and just 57% use application control—both simple steps that could significantly reduce risk.

The Cost of an Attack

Ransomware is not just about ransom payments. While fewer organisations are paying up—just 57% compared to 76% in 2024—attackers are shifting towards data extortion tactics. A staggering 85% of ransomware victims were threatened with exposure of stolen data, adding legal and reputational risks.

Recovery is also slow: 75% of organisations take up to two weeks to recover from an attack, a costly disruption for any business, particularly for SMEs without in-house cybersecurity teams.

A Wake-Up Call for SMEs

For Australian SMEs, the message is clear: ransomware is no longer just an IT problem. It’s a business risk that demands proactive action.

As Gilliland puts it:

“To combat the sophistication of today’s attacks, organisations must fight AI with AI and embrace proactive, identity security strategies like zero trust architecture, Privileged Access Management, and continuous credential monitoring.”

SMEs should review their security posture, prioritise staff training on phishing, and seek expert advice where needed. The question is no longer if your business will be targeted—but when.

The post Ransomware on the Rise: 69% of Businesses Hit, 27% Attacked Twice appeared first on Small Business Connections.