Breaking the Ransomware Cycle: U.S. National Policy Options

Holding objects of value hostage until a ransom is paid for their release is an ancient vice, but it has acquired special salience in the digital age, as cyber criminals in this era of internet-facilitated computer network dependencies have learned to take data itself hostage in return for ransom payments.

This paper discusses the explosive growth of “ransomware” attacks in recent years is the result of dynamics in which the cost and risk to attackers have all but disappeared, victims’ incentives to pay promptly have increased, and the profitability of ransomware crime has duly exploded. Predictably, this has attracted steadily more predators to the “game” of digital ransom, and has produced a “feeding frenzy” of ransomware attacks, which U.S. officials have labeled a national crisis.