Ransomware

Ransomware locks a business out of its own systems and data, then demands payment (usually in cryptocurrency) for a decryption key — with no guarantee paying actually gets your data back. Most ransomware incidents start with phishing or an unpatched, internet-facing system. Verified, offline/immutable backups and fast detection (EDR, SOC monitoring) are the main defences, alongside not paying the ransom where possible.