The share of companies that “will not pay the ransom” even if hit by ransomware is increasing year by year — JIPDEC survey

JIPDEC’s January survey found only 20.1% of affected Japanese companies paid ransomware ransoms, down from the 2024 and 2025 surveys.

More companies are choosing not to pay after attacks, showing a shift in response policy among Japanese businesses.

Recovery still takes one week to one month in many cases, regardless of whether a ransom is paid.

Some victims could not fully restore systems, and data leaks were also a major issue.

The findings highlight the need for stronger recovery, leak prevention, and business continuity planning.