Unit 42’s 2025 extortion economy report documents a structural shift away from ransomware encryption as the primary payment lever toward pure data-theft extortion averaging $5.08 million per victim. Organizations whose resilience strategy is built on backup and recovery are not protected against this model. The threat crosses all vendors and sectors.