Google Drive Fully Launches AI Ransomware Detection and File Recovery Service

Ransomware can encrypt large numbers of files on personal computers and spread to cloud data through synchronization. Google said ransomware was involved in 21% of the intrusions observed by Mandiant, with average losses exceeding $5 million. It has therefore added AI-powered defenses to Google Drive for Windows and macOS to reduce the risk of operational disruption at businesses and schools.

Google launched the service in beta on September 30, 2025, and announced its full rollout on March 30, 2026. The updated AI model detects 14 times as many infections. When the system identifies abnormal encryption, it pauses synchronization and alerts users and administrators. It can also restore large numbers of unaffected files modified within the previous 25 days. The service is available at no additional cost on selected Workspace business and education plans.