Ransomware in 2026: Double Extortion and How to Be Resilient

Ransomware has grown into an organized criminal industry. Two ideas explain why it is harder to handle than it used to be: ransomware-as-a-service and double extortion.

Ransomware-as-a-service

In the RaaS model, developers build the malware and payment infrastructure and rent it to affiliates who carry out the attacks. That lowers the skill needed to launch an attack, so more attackers go after more targets, including small businesses that look easy.

Double and triple extortion

Older attacks only encrypted files, so good backups could undo the damage. Now attackers often steal data first and threaten to publish it. Some add pressure by contacting customers or partners or by overloading websites. Backups remain essential, but they no longer solve the whole problem.

What resilience looks like

• Multi-factor authentication and fast patching to block common entry points.
• Endpoint protection that monitors behavior, not just known viruses.
• Email security and staff training to reduce phishing success.
• Backups kept separate from the main network, with tested restores.
• Limits on who can reach sensitive data, so theft is harder.
• A written incident plan with contacts for your IT provider, insurer and counsel.

Guidance from the U.S. government

A White House memo to business leaders on ransomware recommended backing up data and system images, testing backups and keeping them offline, patching promptly, testing your incident response plan, having a third party check your security work and segmenting networks.

Compliance considerations

If you handle health, payment or other regulated data, leaked data can create reporting duties. Our compliance support helps map these controls to HIPAA and PCI requirements.

Related reading

• managed cybersecurity for Portland businesses
• backup, disaster recovery and business continuity
• AI voice scams coming for Portland small businesses

Talk to a local team

PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.