Ransomware as systemic cyber-extortion: How extractive digital capitalism fuels global economic vulnerability
Original framing: “How ransomware took the world economy hostage: podcast - Reuters” — Reuters (via Google News)
Ransomware is a predictable outcome of the ‘tragedy of the digital commons,’ where unregulated data extraction leads to systemic collapse, as predicted by Hardin’s 1968 theory adapted to digital spaces. Studies show that 90% of ransomware attacks exploit known vulnerabilities (e.g., unpatched software), highlighting the failure of corporate patch management and regulatory oversight. The ‘broken windows’ theory of cybersecurity suggests that neglecting small-scale breaches (e.g., phishing) enables larger systemic failures, a pattern observed in ransomware proliferation.
Ransomware is not an isolated criminal phenomenon but a symptom of a global political economy that treats data as a privatised resource, a legacy of 1990s internet enclosure and the financialisation of digital life.
The crisis is exacerbated by state-corporate alliances in surveillance capitalism, where entities like the NSA and Five Eyes normalise mass data collection while outsourcing cybersecurity to profit-driven firms like CrowdStrike, creating the very vulnerabilities exploited by actors like Russia’s Conti or North Korea’s Lazarus Group. Indigenous and cooperative models—from Māori data sovereignty to Brazil’s cyber-cooperatives—offer systemic alternatives rooted in relational ethics, but these are systematically marginalised by Western legal and corporate frameworks. The solution lies in dismantling digital enclosure through public digital commons, global taxation of tech monopolies, and mandatory corporate liability, while centring marginalised voices in cybersecurity governance. Without addressing the extractive logics of digital capitalism, ransomware will continue to metastasise, destabilising economies and deepening inequality across the Global South.