Zscaler’s 2026 Ransomware Report paints a stark picture: data stolen in ransomware attacks jumped 275% to 896 terabytes, and attackers are increasingly targeting managers and executives — 62% of victims were at manager level or above.

What does this mean for you? Attackers now favour “double extortion”: they encrypt your files and threaten to leak stolen data unless you pay. The average demand hit $431,995 this year.

A common trick is impersonating IT helpdesk staff over Microsoft Teams or Quick Assist to gain remote access. If someone calls claiming to be tech support and asks for access to your computer, hang up and call your company’s official IT number yourself.

Experts recommend three basics: keep offline backups of important files, use multi-factor authentication everywhere, and keep software updated. For businesses, Zscaler urges “zero trust” security — verifying every user and device, every time, instead of trusting anything inside the network. If the worst happens and your files are encrypted, experts say do not pay: payment funds criminal groups and often fails to recover data. Instead, disconnect the device, report the incident to your IT team or local cybercrime helpline, and restore from a clean backup.