It’s more than just money

Presentation overview

Ransomware attacks have evolved from mere financial extortion to a multifaceted threat that can devastate organisations and their employees. While the financial implications of these attacks are often highlighted, this presentation delves deeper into the broader spectrum of harms experienced by victims.

Drawing on insights from extensive interviews with ransomware victims, incident responders, negotiators, law enforcement, and government officials, we uncover a range of severe consequences that extend beyond monetary loss. Organisations face significant risks of business interruption and data exposure, which can lead to substantial financial penalties, reputational damage, and potential legal repercussions.

For employees, the impact can be equally devastating. The psychological toll of a ransomware attack can be profound, leading to increased stress, anxiety, and even post-traumatic stress disorder. Furthermore, the physical consequences, such as disrupted work routines and extended work hours, can exacerbate these mental health challenges.

We explore the factors that can either mitigate or exacerbate these harms, including organisational preparedness, leadership culture, and effective crisis communication. By understanding these dynamics, organisations can develop robust strategies to minimise the impact of ransomware attacks and support their employees during and after such incidents.

This presentation aims to shift the narrative surrounding ransomware, highlighting the human cost of these attacks. By recognizing the multifaceted nature of ransomware harms, we can advocate for more comprehensive and effective response strategies, ultimately protecting organisations and their employees from this growing threat.

Biography

Dr Jason R.C. Nurse is a Reader in Cyber Security in the Institute of Cyber Security for Society and the School of Computing at the University of Kent. He also holds the roles of Associate Fellow at The Royal United Services Institute (RUSI), Visiting Fellow in Defence and Security at Cranfield University, and Research Member of Wolfson College, University of Oxford. His research interests include human aspects of cyber security, security culture, cyber harms, ransomware, cyber insurance, and corporate communications and cyber security. Dr Nurse has published over 120 peer-reviewed articles in prestigious security journals, and his research has been featured in national and international media including the BBC, Associated Press, The Wall Street Journal, The Washington Post, Newsweek, Wired, The Telegraph, and The Independent. Prior to joining Kent in 2018, Dr Nurse was a Senior Researcher in Cyber Security at the University of Oxford and before that, a Research Fellow in Psychology at the University of Warwick.