It's 2025 and almost half of you are still paying ransomware operators

Despite warnings not to pay ransomware operators, almost half of those infected by the malware send cash to the crooks who planted it, according to infosec software slinger Sophos. The vendor surveyed 3,400 IT pros in early 2025 about their experiences over the last year and found 49 percent paid ransoms on their stolen data. …

[Anonymous Coward]

"half of you are still paying ransomware operators"

and the article wasn't about Broadcom/VMWare, Oracle/Java or Microsoft. :)

[Doctor Syntax]

"took advantage of a security gap they were not aware of."

In this case "we" will be some higher level manglement within the company. It's quite likely that somebody down the food-chain may have noticed it. Run a bounty system. It will not only get responses from whoever might have already spotted a gap, it will get people looking and, as an added bonus, increase general security awareness. But ensure the bounty pays worthwhile money.