Ransomware attacks have quadrupled from a year ago, averaging 4K per day, and increasingly target entire networks, not just personal computers
Robert McMillan / Wall Street Journal :
Context & Ripple Effects
This 2016 WSJ report by Robert McMillan was an early marker of the shift the subsequent coverage tracks: ransomware moving off personal computers and onto whole networks, running at roughly 4,000 attacks a day after quadrupling year-over-year. At the time it read as a consumer-security story; the later record shows it was the opening of a business-to-business extortion market.
The arc since confirms the direction rather than reversing it: Trustwave found attacks had quadrupled again in 2019 and overtaken credit card theft as the most common cybercrime, and the model then pivoted from many small payments to fewer, far larger targets with massive ransoms — exactly the network-level targeting this article flagged first.
First-order effects
- Organizations that bought antivirus for endpoints are exposed at the network level, forcing security spending to shift toward segmentation, backups, and incident response rather than per-device protection.
- Individual PC users become relatively less attractive targets as attackers concentrate on networks where a single infection can encrypt an entire organization.
Second-order effects
- Cyber insurers absorb the shock directly — ransomware went on to account for 41% of cyber insurance claims filed in H1 2020, pushing insurers to reprice policies and scrutinize clients' security posture before underwriting.
- Public sector entities and municipalities, with thin IT budgets and high downtime costs, emerge as preferred targets, with surveys showing rising attack expectations across sampled municipalities.
Third-order effects
- If the pattern holds, ransomware stops being a cybersecurity niche and becomes a systemic availability risk for everyday services — the point where experts' warnings start showing up as visible disruptions to ordinary people.
- Extortion economics favor scale and leverage over volume, structuring the criminal market around big-game hunting of networked enterprises and leak-site pressure tactics rather than consumer scams.
The trend: Ransomware is consolidating from a high-volume consumer nuisance into an enterprise extortion industry that targets whole networks, with insurers and public institutions absorbing the fallout.