Ransomware and customer loyalty

1 October 2020 Information Security

Arcserve Southern Africa has revealed the results of research conducted by Arcserve, LLC. The research aimed to measure how cybercrime influences purchasing behaviour and brand loyalty.

It found that while most consumers are taking necessary security precautions to protect their online accounts, businesses may not be doing enough to protect their information – inadvertently driving sales to competitors that can.


Byron Horn-Botha.

The survey of nearly 2000 consumers across North America, the United Kingdom, France, and Germany, found that 70% believe businesses aren’t doing enough to adequately secure their personal information and assume it has been compromised without them knowing it. As consumers become more educated and cyberattacks become well known, perceived trust becomes more influential in their purchasing decisions, with the study also finding that:

• Nearly nine out of ten consumers consider the trustworthiness of a business prior to purchasing a product or service.

• 59% of consumers would likely avoid doing business with an organisation that had experienced a cyberattack in the past year.

These findings suggest businesses must manage uncharted challenges with the rise of cybercriminals now making breaches public, regardless of ransoms paid.

Cyberattacks have arguably become the largest business threat, however, the quantifiable impact on consumer behaviour has not been widely understood. The study found that one in four consumers will abandon a product or service in favour of a competitor after a single ransomware-related service disruption, failed transaction, or instance of inaccessible information. It also found that tolerance for these events quickly deteriorates, with: 

• Over 66% of respondents citing they would turn to a competitor if an organisation couldn’t restore systems and applications within three days following a cyberattack.

• Over a third of those would be willing to switch after a mere 24 hours of waiting to access their information or make a transaction.

Moreover, the potential damage doesn’t stop during or shortly after a cyberattack event. More than eight in ten respondents admit to sharing their negative, ransomware-related experiences with family, friends, or colleagues, posting about their experiences online, or emailing about the incidents.

While the report concludes that consumers are generally intolerant of cyberattacks, there are a few industries where businesses are under even more pressure to keep data secure and operations running. The survey found that:

• Nearly half of consumers would walk away from their banking or securities provider immediately upon experiencing a ransomware-related event which prohibited them from transacting or accessing information.

• 43% would immediately seek out a competitive communications product or service.

While there are many negative ramifications caused by cyberattacks, businesses that take proactive steps and mitigate ransomware quickly will benefit in the long run. Over half of respondents would be willing to pay more for products and services they believe to be more reliable and secure in the banking and securities industries, and over 40% would pay more if they believed products and services were more secure from companies in the healthcare, insurance, and retail categories.

Byron Horn-Botha, Arcserve Southern Africa lead: Channel and Partnerships, says the trends displayed in this international survey are also relevant to the South African market. “The survey results deliver a stark cautionary message to all businesses to prioritise cybersecurity and disaster recovery (DR) plans or lose customer loyalty and trade. Arcserve recommends a two-pronged approach where cybersecurity and DR are strategically interlinked in business operations,” Horn-Botha concludes.

Read the report at www.arcserve.com/protect-against-ransomware/




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
Five tech trends shaping business in 2025
Information Security Infrastructure
From runaway IT costs to the urgent need for comprehensive AI strategies that drive sustainable business impact, executives must be prepared to navigate a complex and evolving technology environment to extract maximum value from their investments.

Read more...
Kaspersky’s predictions for 2025 APT landscape
Information Security
The 2025 advanced persistent threat (APT) includes the rise of hacktivist alliances, increased use of AI-powered tools by state-affiliated actors – often with embedded backdoor – more supply chain attacks on open-source projects.

Read more...
SecurityHQ certified B-BBEE Level 1: Delivering global services from a local entity
SecurityHQ Information Security
SecurityHQ, a global managed security services provider (MSSP) with an office in South Africa, has announced it can now offer local companies a complete managed cybersecurity service from a Level-1 B-BBEE accredited and 51% black-owned service provider.

Read more...
2024, the year of Fraud-as-a-Service
Information Security
A report from AU10TIX outlines how ‘the industry’s dark engine’ offers user-friendly fraud kits that enable amateurs to execute complex attacks against thousands of accounts in minutes.

Read more...
The future of endpoint security
Information Security
Endpoint security is a critical pillar of cybersecurity, especially for South African businesses, which are becoming prime targets for cybercriminals. Endpoint security involves safeguarding devices connected to a network from a range of cyberthreats.

Read more...
Not enough businesses take cybercrime seriously
Information Security
Interpol recently revealed that cybercrime, specifically ransomware incidents, cost the South African economy up to 1% of the country’s GDP, while the Council for Scientific and Industrial Research estimated the loss at R2,2 billion a year.

Read more...
Navigating today’s cloud security challenges
Information Security Infrastructure
While the cloud certainly enables enterprises to quickly adapt to today’s evolving demands, it also introduces unique challenges that security teams must recognise and manage. Vincent Hwang offers insights from the 2025 State of Cloud Security Report.

Read more...