Security researchers report a measurable shift among ransomware groups away from encryption toward pure data exfiltration and extortion. Backup adoption drove the change.
Incident response costs remain high. Regulatory disclosure obligations add complexity.
