What Is Ransomware, and How Did It Get So Big?

Ransomware attacks continue to plague businesses and organizations globally in 2025, impacting sectors like retail, manufacturing, healthcare, and education, despite efforts to curb the crimes following a 2021 cyberattack that disrupted US East Coast fuel supplies; the persistence of ransomware is attributed to the high profitability and relatively low risk for hackers.

Analysis

Ransomware remains a persistent and significant cyber threat to businesses and organizations globally in 2025, directly impacting diverse sectors including retail, manufacturing, hospitals, and schools. This ongoing challenge exists despite US governmental efforts initiated in 2021, which designated ransomware a national security priority and involved executive orders, summits, indictments, and sanctions following a crippling attack on US East Coast fuel supplies. The scourge's tenacity is fueled by the attractive economics for hackers, characterized by easy profits and relatively low risks associated with encrypting victims' computer files for ransom. The continued prevalence underscores the difficulties in effectively mitigating this form of cybercrime, indicating a persistent vulnerability across industries and a potential drag on operational stability and security.

Key Decisions for Investors

• Investors should consider overweighting allocations to cybersecurity firms, as the enduring and pervasive nature of ransomware attacks likely translates to sustained, if not increasing, demand for advanced security solutions and services.
• Scrutinize portfolio companies, particularly those in retail, manufacturing, healthcare, and education, for robust cybersecurity preparedness and incident response plans, as these sectors are explicitly identified as currently impacted, posing direct financial and operational risks.
• Acknowledge that the limited success of current anti-ransomware measures implies that businesses will continue to face associated costs, potentially pressuring margins and necessitating careful due diligence regarding corporate cyber resilience.
• Monitor developments in both offensive cyber capabilities and defensive technologies, as well as any significant shifts in the effectiveness of international regulatory and law enforcement actions, which could alter the prevailing risk landscape for businesses.