Recent reports indicate that ransomware groups are shifting back to encryption-based attacks after seeing diminishing returns from data exfiltration methods. This change is largely attributed to the Clop ransomware gang, which had previously popularized attacks that focused solely on stealing data rather than encrypting it. As the effectiveness of these data-only methods declines, attackers are likely to resort to more traditional tactics that involve holding data hostage until a ransom is paid. This shift could affect a wide range of organizations, particularly those that may not have robust backup systems or incident response plans in place. The overall implications suggest that businesses need to enhance their security measures to guard against these evolving ransomware tactics.