--- title: "Cloudflare: more than 13% of organizations faced extortion during a DDoS attack — ZEBR.ai" description: "The highest number of DDoS attacks in Q1 targeted telecommunications companies" url: "https://zebr.ai/en/blog/cloudflare-more-than-13-of-organizations-faced-extortion-during-a-ddos-attack" markdown_url: "https://zebr.ai/en/blog/cloudflare-more-than-13-of-organizations-faced-extortion-during-a-ddos-attack.md" language: "en" published: "2021-06-24T08:40:35+00:00" alternates: cs: "https://zebr.ai/cs/blog/cloudflare-vice-nez-13-organizaci-se-behem-ddos-utoku-setkalo-s-vydiranim.md" sl: "https://zebr.ai/sl/blog/cloudflare-vec-kot-13-organizacij-se-je-med-ddos-napadom-soocilo-z-izsiljevanjem.md" sk: "https://zebr.ai/sk/blog/cloudflare-viac-ako-13-organizacii-sa-pocas-ddos-utoku-stretlo-s-vydieranim.md" hr: "https://zebr.ai/hr/blog/cloudflare-vise-od-13-organizacija-tijekom-ddos-napada-suocilo-se-s-ucjenom.md" sr-Latn: "https://zebr.ai/sr-latn/blog/cloudflare-vise-od-13-organizacija-suocilo-se-s-iznudom-tokom-ddos-napada.md" bs: "https://zebr.ai/bs/blog/cloudflare-vise-od-13-organizacija-suocilo-se-s-iznudom-tokom-ddos-napada.md" sq: "https://zebr.ai/sq/blog/cloudflare-me-shume-se-13-e-organizatave-u-perballen-me-zhvatje-gjate-nje-sulmi-ddos.md" fr: "https://zebr.ai/fr/blog/cloudflare-plus-de-13-des-organisations-ont-ete-victimes-d-extorsion-lors-d-une-attaque-ddos.md" es: "https://zebr.ai/es/blog/cloudflare-mas-del-13-de-las-organizaciones-se-enfrentaron-a-extorsion-durante-un-ataque-ddos.md" de: "https://zebr.ai/de/blog/cloudflare-mehr-als-13-der-organisationen-waren-waehrend-eines-ddos-angriffs-mit-erpressung-konfrontiert.md" pt-BR: "https://zebr.ai/pt-br/blog/cloudflare-mais-de-13-das-organizacoes-enfrentaram-extorsao-durante-um-ataque-ddos.md" pl: "https://zebr.ai/pl/blog/cloudflare-ponad-13-organizacji-doswiadczylo-wymuszen-podczas-ataku-ddos.md" it: "https://zebr.ai/it/blog/cloudflare-oltre-il-13-delle-organizzazioni-ha-subito-estorsioni-durante-un-attacco-ddos.md" nl: "https://zebr.ai/nl/blog/cloudflare-meer-dan-13-van-de-organisaties-kreeg-tijdens-een-ddos-aanval-te-maken-met-afpersing.md" hu: "https://zebr.ai/hu/blog/cloudflare-a-szervezetek-tobb-mint-13-a-zsarolassal-talalkozott-ddos-tamadas-soran.md" ro: "https://zebr.ai/ro/blog/cloudflare-peste-13-dintre-organizatii-s-au-confruntat-cu-extorcarea-in-timpul-unui-atac-ddos.md" tr: "https://zebr.ai/tr/blog/cloudflare-kuruluslarin-13-unden-fazlasi-ddos-saldirisi-sirasinda-fidye-tehdidiyle-karsilasti.md" id: "https://zebr.ai/id/blog/cloudflare-lebih-dari-13-organisasi-menghadapi-pemerasan-selama-serangan-ddos.md" --- [Home](https://zebr.ai/en/) [Blog](https://zebr.ai/en/blog) Cloudflare: more than 13% of organizations faced extortion during a DDoS attack # Cloudflare: more than 13% of organizations faced extortion during a DDoS attack [Cloudflare](https://zebr.ai/en/blog?tag=cloudflare) [DDoS](https://zebr.ai/en/blog?tag=ddos) [press release](https://zebr.ai/en/blog?tag=press-releases) [ransomware](https://zebr.ai/en/blog?tag=ransomware) [web applications](https://zebr.ai/en/blog?tag=web-applications) The highest number of DDoS attacks in Q1 targeted telecommunications companies 24/06/2021 · 2 min read · ZEBR.ai editorial team *The highest number of DDoS attacks in Q1 targeted telecommunications companies* **PRAGUE, June 24, 2021** – [**Cloudflare**](https://www.cloudflare.com/), a provider of a platform that improves the security, performance and reliability of internet applications, stated that according to its DDoS report for the first quarter of 2021, up to **13% of DDoS attack victims reported that they had also become victims of extortion**. Although this represents a slight decline compared to the fourth quarter of 2020, the long-term trend shows a steady year-on-year increase in victims of Ransom DDoS attacks. The findings of the DDoS report are based on information gathered during the first three months of 2021 from more than 200 Cloudflare data centers, which protect over 3 million customers and provide interesting statistics on DDoS attacks and their trends. “After launching a DDoS attack, its perpetrators usually promise to stop it in exchange for a paid ransom,” said **Michal Hebeda, Sales Engineer at ZEBRA SYSTEMS**. “However, security experts agree that paying such a ransom is very short-sighted. Word spreads very quickly within the cybercriminal community that a given company's protection has been breached and that the victim is willing to pay. Naturally, further attacks may follow.” Another interesting finding of the report is that in the first quarter, attackers most frequently targeted the telecommunications industry. For this sector, this represents a jump from sixth place in the last quarter of the previous year. The consumer services industry took the proverbial silver medal, while the security and investigations sector claimed bronze. During the period under review, more than 90% of attacks lasted less than one hour. Attacks with such a short duration may attempt to cause damage without being detected by detection systems. Attackers may also use various load-testing tools available on the darknet. For example, with short bursts such as a SYN flood (a flood of SYN packets), they can test how well their target is secured and, based on the results, decide to launch a larger attack at a higher rate and for a longer duration. More about the report at Learn more about Cloudflare solutions for protection against DDoS attacks at **.** Article author: ZEBR.ai editorial team Read on ## More related articles [All articles](https://zebr.ai/en/blog) ### [ZEBR.AI: N-able introduces shadow AI identification into its UEM and security solutions](https://zebr.ai/en/blog/zebr-ai-n-able-introduces-shadow-ai-identification-into-its-uem-and-security-solutions) New capabilities provide visibility into the use of AI tools across all endpoints and networks by individual identities, without the need for additional agents or infrastructure 28/09/2026 · 3 min read ### [Acronis: Ransomware can halt production even without attacking PLC systems](https://zebr.ai/en/blog/acronis-ransomware-can-halt-production-even-without-attacking-plc-systems) For manufacturing companies, ransomware is not just a matter of IT security, but a matter of production continuity 23/09/2026 · 3 min read ### [GFI Archiver AI simplifies integration with GFI KerioConnect](https://zebr.ai/en/blog/gfi-archiver-ai-simplifies-integration-with-gfi-kerioconnect) Direct integration of both products makes working with corporate emails easier, improves mail server performance, and enables more effective compliance with regulations 21/09/2026 · 2 min read Contact ## Do you need a solution for yourself or for your client? Tell us which service you are looking into, and a specialist in that area will get back to you directly. [(704) 745-4214](tel:+17047454214)\ --- - Source: - Site overview for AI agents: