Inside the Economics of Cyber Extortion: Enabling Data Driven Decisions In Uncertain Times

New data from Coveware by Veeam shows that attacker leverage is extending beyond encryption. It’s increasingly being built around identity, social engineering, SaaS/cloud access, and sensitive data exposure.

Threat actors are finding ways to log in quietly through trusted workflows, manipulate help desks and MFA resets, abuse delegated access, and turn stolen data into business pressure.

In this webinar Brad Linch and Ray Umerley from Veeam take a data-driven look at the changing leverage economy, why outcomes are harder to forecast, which organizations are most exposed, and how prepared companies can act with clarity instead of reacting under pressure.

What You’ll Learn:

• Why ransom payment rates continue to fall even as select payments grow sharply larger
• How data exfiltration, social engineering, and identity compromise are reshaping attacker leverage
• Why software services, healthcare, professional services, and the mid-market remained heavily represented in Q2 cases
• The ways in which trusted access paths like MFA resets, help desks, SaaS admin portals, OAuth grants, vendor access, and remote tools have become core attack surfaces
• What leadership teams need to decide quickly when extortion outcomes are uncertain and recovery pressure is high