Protect Yourself from Ransomware

Ransomware remains one of the most significant and persistent cyber threats affecting UK organisations. 

Ransomware is a type of malware which prevents you from accessing your device and the data stored on it, usually by encrypting your files. A criminal group will then demand a ransom in exchange for decryption. 

During FY 2025/26, Report Fraud received 323 reports relating to ransomware incidents, with over half of victims identifying as Small or Medium-sized Enterprises (SMEs). 

According to the Cyber security breaches survey 2025, businesses who were victims of cyber crime experienced an average of 30 cyber crimes of any kind during 2025, indicating a high level of repeat victimisation amongst organisations experiencing cyber crime. 

Defending your organisation against malware or ransomware attacks.

 The UK's National Cyber Security Centre (NCSC) has produced guidance that helps private and public sector organisations deal with the effects of malware (which includes ransomware ). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected.

The NCSC guidance includes:

Backups: guidance on backup strategies that are effective against ransomware attacks
Blocking malware: tools and techniques to prevent malware being delivered and spreading across your devices
Incident management: advice on how to effectively detect, respond to and resolve cyber incidents, as well details of how to find an NCSC-assured Cyber Incident Response provider.

www.ncsc.gov.uk/ransomware

Ransom demands - should you pay?

The NCSC and UK law enforcement do not encourage, endorse nor condone the payment of ransom demands.

But know that if you do pay the ransom:

• there is no guarantee that you will get access to your data or computer
• your computer will still be infected
• you will be paying criminal groups
• you're more likely to be targeted in future

Reporting live ransomware attacks against small and medium-sized enterprises (SMEs)

If you are small or medium-sized enterprise experiencing a ransomware attack in progress, you should report it to the police immediately via
Report Fraud on 0300 123 2040. This service is available 24 hours a day, 7 days a week.

Hertfordshire Constabularies Cyber Protect Officers now offer fully funded training on how to spot a ransomware email attack, what a good password looks like, how to secure your accounts and much more. Training can be given face to face or via Teams. If you want to book some training or want more information contact us on HertsCyberProtect@Herts.Police.UK.