According to the Department of Homeland Security’s (DHS) 2024 Homeland Threat Assessment, ransomware remains a prominent threat to businesses, schools, and hospitals in the United States. More specifically, the public sector is a prime target.

Stealing data from victim networks prior to the encryption process provides cyber threat actors the means to apply additional pressure on victims to pay ransom demands in hopes of preventing their data from being publicly exposed, and is very effective.