What happened after the attack?

Most companies did not ante up ransom money after they were attacked, the Intermedia survey found. Three-quarters of IT experts said that their customers kept their money to themselves, but of those that did pay, the businesses parted with a median ransom of $250 per user. Yet alarmingly, of those that paid, only 71 percent had their files restored.

Meanwhile, three-quarters of IT vendors in the Intermedia survey said customers’ computers were wiped and restored to remove the virus. Customers spent up to three days wiping and restoring all the affected computers, with 13 percent spending less than eight hours, though 7 percent spent more than a week.