Ransomware
Ransomware attacks on government agencies surge 91% in a year
Ransomware attacks against government agencies worldwide have jumped 91% in the past year, with US organisations hit hardest. Some victims faced weeks of disruption and large ransom demands, according to Comparitech.
Ross Grant2 min read
The short version
Ransomware is a type of cyber attack where criminals lock up computer systems and demand money to unlock them. In the past year, attacks on government agencies have nearly doubled. Some agencies lost access to their systems for weeks, and sensitive data was stolen. Experts say regular backups and quick warnings to those affected are key to limiting the damage.
By the numbers
- 91%increase in ransomware attacks on government agencies in a yearITPro
- 132total government ransomware incidents recorded worldwideITPro
- 41US government agencies hit by ransomwareITPro
- $175,000ransom paid by Beaver County Behaviour HealthITPro
- $2 millionhighest ransom demand (Anne Arundel County, not paid)ITPro
- 2.6TBdata stolen in Anne Arundel County attackITPro
What happened?
Ransomware attacks on government agencies worldwide have increased by 91% in the past year, according to Comparitech, as reported by ITPro. The US was the most targeted, with 41 out of 132 recorded incidents. Some agencies faced weeks of disruption, large ransom demands, and data theft. The report highlights the need for better preparation and faster notification to affected people.
Who is affected
According to ITPro (opens in a new tab), government agencies of all sizes and in many countries have been targeted by ransomware. The US saw the most attacks, with 41 out of 132 reported incidents, an increase of 78% from the previous year. Germany was the next most affected, but attacks were recorded worldwide. Specific victims mentioned include the Angolan state telecommunications agency Unitel, the American city of Coweta, the Spanish municipality Ayuntamiento de Collado Villalba, and several US counties such as Merrimack and Anne Arundel.
What was taken
In some cases, attackers stole large amounts of sensitive data. For example, the ransomware group Rhysida stole 2.6TB of data from Anne Arundel County in the US. This included medical information, social security numbers and payroll data. Comparitech reports that in most incidents, data was stolen, and experts stress the importance of warning affected people quickly to help prevent fraud.
What it has cost
The financial impact varied. Beaver County Behaviour Health in the US paid $175,000 to hackers. Comparitech says the average ransom demand was over half a million dollars, and some demands were much higher. Anne Arundel County received a $2 million ransom demand, though it was not paid. The cost also included weeks of downtime for some agencies. For example, Unitel suffered three weeks of disruption, Coweta took two weeks to restore services, and Collado Villalba worked 16-hour days for a week to recover.
The response
Comparitech highlights that regular backups can help agencies recover without paying ransoms, as seen in Merrimack County, which avoided serious disruption. The report also stresses the need for government agencies to have a clear plan for ransomware attacks, including regular backups and assuming a data breach has occurred. Timely notification to affected people is also essential. In one case, official letters to those affected by a February 2025 attack were only sent months later, which experts say is too slow to protect people from fraud.
Has this happened before?
Anne Arundel County experienced its second ransomware incident in a year and a half, showing that repeat attacks are possible. Comparitech notes that delays in notifying victims have happened before, which can increase the risk of harm if stolen data is misused.
Why it matters
Government services are essential for daily life. When ransomware hits, it can shut down critical services and put people's sensitive data at risk. The sharp rise in attacks shows that no agency is safe, and slow notifications can leave people exposed to fraud.
Key points
- Ransomware attacks on government agencies rose 91% in a year.
- The US had the most incidents, with 41 out of 132 attacks.
- Some agencies faced weeks of downtime and large ransom demands.
- Sensitive data, including medical and payroll details, was stolen in some cases.
- Regular backups and fast notifications help limit the damage.