May 15, 2023 By Jennifer Gregory 2 min read

You can’t look at the news these days without reading about layoffs in the technology sector. Roger Lee, founder of told that more than 120,000 tech employees lost their jobs in 2023 as of Feb 27, compared to 161,411 in all of 2022. However, all layoffs aren’t bad news.

Most people don’t think of criminals losing their jobs. But if the criminal activity isn’t making money, then it makes no sense to continue. And that is happening in the cyber crime world.

At least 45 threat actors working at a call center run by former members of the ransomware group Conti lost their jobs last fall. Before getting their pink slips, their job was convincing people over the phone to let them install remote access software onto their computers or networks. With access, the attackers could then infect networks with ransomware. However, the scam wasn’t as successful as planned and the call center lost money.

Data shows cyber crime is slightly less lucrative

Data backs up the trend that cyber crime is becoming less of a big payday. Ransomware especially appears to be less lucrative than it was even a year or two ago. One of the biggest reasons is that fewer victims are paying the ransom than before. Coveware’s CEO Bill Siegel told the Wall Street Journal that only 37% of victims pay the ransom today, compared to 85% four years ago.

Additionally, the IBM Security X-Force study showed a significant reduction in the average length of an attack. The duration went from over two months in 2019 to less than four days in 2021. The IBM 2022 Cost of a Data Breach Report found that the average cost of a ransomware attack went down slightly from $4.62 million in 2021 to $4.54 million in 2022. However, the cost of a ransomware attack is still higher than the overall cost of a data breach at $4.35 million.

Are we moving in the right direction?

Yes. Probably. But now isn’t the time to let up.

Companies improving their cybersecurity measures and creating an incident response plan for ransomware help to reduce the impact of cyberattacks. Additionally, companies are training employees on how to respond to an attack, which can reduce the impact and the duration. By continuing effective measures and putting cyber criminals out of work, organizations and governments can hopefully continue the trend of threat actor layoffs into the future.

More from News

CISA releases landmark cyber incident reporting proposal

2 min read - Due to ongoing cyberattacks and threats, critical infrastructure organizations have been on high alert. Now, the Cybersecurity and Infrastructure Security Agency (CISA) has introduced a draft of landmark regulation outlining how organizations will be required to report cyber incidents to the federal government.The 447-page Notice of Proposed Rulemaking (NPRM) has been released and is open for public feedback through the Federal Register. CISA was required to develop this report by the Cyber Incident Reporting for Critical Infrastructure Act of 2022…

Recent developments and updates in Biden cyber policy

3 min read - The White House recently released its budget for the 2025 fiscal year, which supports the government’s commitment to cybersecurity. The cybersecurity funding allocations line up with the FY 2025 cybersecurity spending priorities released last year that included the following pillars: Defend critical infrastructure Disrupt and dismantle threat actors Shape market forces to drive security and resilience Invest in a resilient future Forge international partnerships to pursue shared goals. In 2023, the White House released a 35-page document detailing the new…

Change Healthcare cyberattack causes dire billing crisis

3 min read - Last month’s cyberattack on Change Healthcare, a sizable unit of UnitedHealth Group, brought new repercussions rarely seen in a cyberattack. As a result of the threat actor’s actions, healthcare systems and providers suffered cash flow issues, which resulted in providers being unable to pay their rent, owners dipping into their personal savings and patients being prevented from receiving important medications. Most importantly, patients are unable to get insurance approval for procedures, surgeries and prescriptions, which can affect their health outcomes.…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today