The trend is toward “a correlation between higher ransom demands in cases where exfiltration has occurred,” she adds, based on what the extorters believe organizations can pay. “We’re also seeing that threat actors are getting a lot smarter about exactly what type of information they’re taking out of the door with them: usually sensitive in nature, or financial data that helps strengthen their side of the negotiation.”
Cyber attacks happen to all types of organizations, and, globally, big-name corporations and non-profits alike have been bilked of billions of dollars. “No information is immune, and ransomware is size- and industry-agnostic,” says Roth; yet, she says, from what they have seen, only 64 per cent of organizations have a structured incident response plan to a cyber attack.
“I can’t tell you the amount of times I’ve been on calls” where the wrong people are on the call – i.e., no IT staff — and “where clients don’t know where their critical data is sitting in their environment,” or whether they have a tested backup system.
In addition to an incident response plan, organizations can work with “breach” coaches ahead…
