Top 5 Companies That Refused to Pay Hackers a Ransom
![Top 5 Companies That Refused to Pay Hackers a Ransom]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/29-1-998x499.png","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/29-1-1996x998.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/29-1-1150x575.png","tablet2x":"assets\/images\/discovery\/29-1.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/29-1-740x370.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/29-1-1478x739.png"})
At the end of May 2025, the largest cryptocurrency exchange in the U.S., Coinbase, became the target of a hacker attack. The attackers copied customers' personal data and then began contacting them while impersonating Coinbase, coercing users into transferring cryptocurrency. The hackers also demanded a ransom directly from the exchange - but were met with a firm response: Coinbase refused to pay the $20 million and sought help from law enforcement.
This is a striking example of a company standing its ground against cybercriminals. Let’s take a look at several other similar cases where businesses chose resistance over ransom.
- LockerGoga ransomware attack on Norsk Hydro
In March 2019, Norwegian aluminum producer Norsk Hydro was hit by the LockerGoga ransomware. This malware operated unusually: it didn’t rely on phishing and only spread based on direct hacker commands - and it was highly destructive. Despite the scale of the attack, Norsk Hydro refused to pay the ransom and spent three weeks recovering its systems independently. The total damages exceeded $70 million.
- Major data breach at Latitude Financial
Australian financial services company Latitude Financial declined to pay a ransom to hackers who breached its systems in March 2023. The attackers gained access to the personal data of 14 million customers. Nevertheless, Latitude chose not to negotiate with the criminals. The company’s financial losses were estimated at $76 million.![Close-up of a computer monitor showing a blinking “Hacked System Alert” message in red text, warning of a cyberattack and security breach.]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/29-2-998x666.png","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/29-2-1976x1318.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/29-2-1050x700.png","tablet2x":"assets\/images\/discovery\/29-2.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/29-2-740x494.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/29-2-1478x986.png"})
- CD projekt SA data breach
In February 2021, game developer CD Projekt Red was targeted by a ransomware attack. Hackers gained access to a significant amount of corporate and player data, but the company firmly refused to pay the ransom. Later, it was revealed that the stolen data was sold on the dark web for $7 million, though the buyer’s identity remains unknown.
- Cyberattack on Ritzau news agency
In November 2020, Denmark’s news agency Ritzau was hit by ransomware that infected its servers and halted newsroom operations. To resolve the crisis, Ritzau hired an external digital forensics firm. The exact amount of financial loss was never disclosed. The ransom demand also remained unknown, as the company never opened the hacker's message. As a result, the identity of the perpetrators also remains a mystery.
- Rhysida ransomware attack on port of Seattle
In August 2024, the Port of Seattle was attacked by the Rhysida ransomware group. Hackers gained access to computers and encrypted critical data. The disruption impacted multiple services at Seattle-Tacoma International Airport (Sea-Tac), forcing staff to revert to manual operations. Some maritime activities at the port were also delayed. However, no ransom was paid, and the port did not disclose the extent of its financial losses.
Fill out the form below, and we’ll get in touch with you right away to discuss a plan to protect your business!
![TOP 5 Largest Cryptocurrency Hacks in History]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/1-1-554x277.png","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/1-1-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/1-1-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/1-1-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/1-1-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/1-1-1118x559.png"})
![Datami at the Barcelona Cybersecurity Congress 2025: New Horizons in Cybersecurity]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-554x277.jpg","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-1106x553.jpg","tablet":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-380x190.jpg","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-758x379.jpg","mobile":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-560x280.jpg","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-1118x559.jpg"})
![Over 480,000 Catholic Health Patients Affected by Personal Data Breach]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-554x277.png","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-1118x559.png"})
![Antivirus Is Not a Shield: Why You Can’t Do Without Pentesting]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-554x277.png","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-1118x559.png"})
![Top 10 Cyberattacks That Brought Global Corporations to a Halt]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-554x277.png","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-1118x559.png"})
![Why Your Smartphone Is at Risk: 5 Common Myths About Mobile Security]({"desctop":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-554x277.png","desctop2x":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-1118x559.png"})