Connect with us

Accounting

9 out 10 made at least one ransomware payment last year

Published

on

Ransomware attacks have risen dramatically in just over a year, which has led to the vast majority of IT decision-makers reporting they’ve made at least one payment in the same timeframe.

These were among the findings of cybersecurity solutions company ExtraHop, which found that 95% of people who provide input into their company’s IT decisions reported experiencing at least one ransomware incident last year. The average number of incidents, which include both successful and non-successful ransomware attempts, was eight. The data indicates that organizations are increasingly losing ground against ransomware; while 9% said they experienced no incidents in 2022, last year that proportion shrank to 5%. ExtraHop said that, in the most recent survey, 58% of organizations experienced six or more incidents in 2023, up 32% year over year.

Further, people are actually paying these ransoms more often. ExtraHop said 91% of organizations paid at least one ransom last year, and 75% of respondents said they paid more than half the time. The number of organizations never having paid a ransom has significantly decreased — in the 2022 survey results, 28% of respondents never paid the ransom, compared to 17% in 2023 and 9% in 2024.

ransomware-five.jpg

“We suspect more organizations are paying ransoms because they can’t afford not to pay. This could be due to a variety of factors. For one, they may lack the business and operational resilience to weather a ransomware attack. So they pay the ransom out of desperation or necessity, believing that paying the ransom provides them with the quickest path back to restored business operations. And when people’s health or lives are at stake, some organizations have no choice but to pay,” said the report, though it noted that paying the ransom doesn’t guarantee an organization will get its data back, and that other research shows that organizations that have fallen victim to a ransomware attack are six times more likely to be targeted again over the next three months.

The most common payment amount, taking up 41.6% of ransoms, was somewhere between $500,000 and $1 million.

This is part of the overall trend of growing cybercrime costs. A February study from Statista said that in 2024 alone the global cost of cybercrime is expected to be $9.22 trillion — an eye-watering sum that is roughly equal to the GDP of Japan and Germany combined. By 2028, costs are estimated to rise even further to $13.82 trillion, just four trillion short of China’s entire GDP. This cost included stolen money, damage and destruction of data, lost productivity, theft of intellectual property, theft of personal or financial data, post-attack disruption to the ordinary course of business, restoration and deletion of hacked data and systems, and reputational harm.

Putting things in private sector terms, the estimate cybercrime toll in 2024 is about as big as the total market caps of Microsoft, Apple, Google and NVIDIA combined — or about 19 times the total value of Walmart.

Costs like this include ransomware, yes, but other kinds of cybercrime as well, like identity theft, which tends to be driven by data breaches. These, too, are on the rise according to cybersecurity solutions provider Surfshark, with data breaches having grown by 434.9% from just Q3 to Q4 of 2023. In the third quarter of 2023, 627 accounts were being breached every minute. In the fourth quarter, however, 3,353 accounts were leaked every 60 seconds. The U.S. experienced about 90 million breaches, more than any other country; China was a distant second, at about 70 million. However, when looking at things in terms of growth, the data shows that the central Asian nation of Kyrgyzstan seems to be under some sort of cyber crime wave, as breaches have increased 19,240% over the course of a year.

Regardless, numbers like these indicate that cybercrime is, unfortunately, a booming business.

“Some still believe a typical hacker is just a guy wearing a hoodie in a dark room. But that isn’t true anymore. Cybercrime has evolved into a professionalized global enterprise with skilled hackers, nation-state backed groups, and organized cybercrime rings working in tandem,” said Carlos Salas, a cybersecurity expert at virtual private network provider NordLayer.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Accounting

EV makers win 2-year extension to qualify for tax credits

Published

on

The Biden administration gave carmakers a partial reprieve in finalizing electric-vehicle tax credit rules intended to loosen China’s grip on battery materials crucial to the car industry’s future.

Starting in 2025, plug-in cars containing critical minerals from businesses controlled by U.S. geopolitical foes, including China, will be ineligible for up to $7,500 tax credits, the Treasury Department said Friday. Automakers will get an extra two years, however, to shore up sourcing of graphite and other materials considered difficult to trace to their origin.

The rules put finishing touches on President Joe Biden’s push to develop an alternative to China’s preeminent EV and battery supply chains. The administration is imposing stringent sourcing requirements for raw materials and components in order for electric cars to qualify for the tax credits that are a powerful draw for consumers otherwise put off by still-high prices.

“These actions provide a strong signal to automakers that we want to see EVs built here in America with components and critical minerals sourced from the U.S. and our allies and partners,” White House Climate adviser John Podesta said.

The two-year exemption speaks to the challenges automakers have had reducing their reliance on Chinese suppliers of materials such as graphite. The mineral used in battery anodes emerged as a geopolitical flashpoint last year when Beijing placed restrictions on exports, sparking fears of global shortages.

The Biden administration’s rules don’t allow tax breaks for vehicles with batteries containing critical minerals from foreign entities of concern, a term referring to businesses controlled by US geopolitical foes such as China, North Korea, Russia and Iran. Those requirements take effect in 2025, as proposed.

But Biden has given auto and battery manufacturers some flexibility on this front, too. In December, the administration decided to allow materials from foreign subsidiaries of privately owned Chinese companies in non-FEOC countries — such as Australia or Indonesia — to count toward tax credit eligibility. This drew criticism from Western miners and policymakers who want Biden to more aggressively cut China out of the supply chain.

Automakers will now have until 2027 to curb the use of certain difficult-to-trace materials from FEOCs, provided that they submit plans to comply after the two-year transition and it’s approved by the government, the Treasury Department said.

“FEOC exemptions for any battery materials should be temporary,” said Abigail Hunter, the executive director of the Center for Critical Minerals Strategy at SAFE, a Washington think tank. “We need a clear exit strategy, lest we continue our dependencies on adversaries and further undermine the competitiveness of U.S. and allied critical minerals projects.”

The rules release concludes two years of work on requirements that already have reduced the number of EVs eligible for tax credits. About 20 models qualify today, compared to as many as 70 previously. Treasury Department officials said Friday they expect the number of qualifying vehicles to continue to fluctuate as companies adjust their supply chains.

Automakers including Tesla Inc., General Motors Co. and Toyota Motor Corp. have lobbied for additional flexibility to meet requirements. A lobby group representing automakers based outside the US praised the additional two years provided for the difficult-to-trace materials.

“It will take time for the global production and sourcing of graphite and other critical minerals needed to produce EVs to match the strict standards required by automakers,” Autos Drive America President Jennifer Safavian said in a statement.

Continue Reading

Accounting

Oregon senator Ron Wyden demands refunds for TurboTax customers over glitch

Published

on

Senate Finance Committee Chairman Ron Wyden, D-Oregon, demanded in a letter that Intuit give a refund to Oregonians who, due to a software glitch in the company’s TurboTax tax prep software, were steered toward taking the standard deduction when they would have paid less tax if they’d itemized. The senator said the company had known of this glitch in early April, but didn’t acknowledge it until shortly before the filing deadline.

The glitch, according to the Oregonian, affected about 12,000 people, some of whom reported having to pay hundreds more in tax dollars than they needed to. They were generally using the desktop version of the software, versus the online version.

“Fixing this error will require identifying all affected Oregonians, notifying them, and ensuring they can be made whole,” said the senator. “In part because of TurboTax’s various guarantees and market share, Oregonians who overpaid due to TurboTax’s error likely assumed the software opted them into claiming state standard deduction to minimize their taxes. That assumption was wrong. And because the vast majority of taxpayers understandably dread filing season and avoid thinking about taxes after it ends, many of those affected will not learn on their own that they overpaid. Intuit must act to inform them and help them get the full tax refunds they are entitled to receive.”

The TurboTax logo on a laptop computer in an arranged photograph in Hastings-on-Hudson, New York, U.S., on Friday Sept. 3, 2021. Photographer: Tiffany Hagler-Geard/Bloomberg

Tiffany Hagler-Geard/Bloomberg

An Intuit spokesperson said the company is currently working to resolve the issue, referencing their tax return lifetime guarantee.

“As part of our tax return lifetime guarantee, we are committed to the accuracy of TurboTax tax filers’ tax returns to ensure they receive the maximum refund possible. We are quickly working to resolve an issue impacting a small number of customers and actively engaging with those filers impacted to ensure their returns are correct and that they receive the maximum refund they are owed,” said the spokesperson.

The senator has also asked Intuit for an explanation of how this glitch happened in the first place, as well as an approximate timeline for the steps it took once it became aware of it. He has also asked for a count of precisely how many people were affected, as well as Intuit’s plans for both addressing this problem and what the company will do to prevent it in the future.

Continue Reading

Accounting

On the move: RSM names a client experience leader

Published

on

RSM US named its first enterprise client experience leader; the Financial Accounting Foundation is looking for nominees for its Financial Accounting Standards Advisory Council; RKL named a new office managing partner; REDW appointed three new vice presidents; and other firm and personnel news from across the accounting profession.

Continue Reading

Trending