Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management
Company Says It Paid Ransomware Attacker for Promise to Delete Stolen Data Mathew J. Schwartz (euroinfosec) • August 31, 2020 Blackbaud first revealed the ransomware attack and data breach via this notification on its website.Filing a class action lawsuit against a business that has suffered a data breach is a common occurrence.
See Also: Compromised Credentials, Account Takeover, and Intelligence-Driven Password Policies
Increasingly, however, ransomware is becoming part of the mix, owing to gangs first exfiltrating data and then threatening to leak it if victims don't pay a ransom (see: Ransomware + Exfiltration + Leaks = Data Breach).
Ransomware adds a further wrinkle to the data breach discussion and potential legal ramifications for breached organizations: A growing number of organizations hit by ransomware have said that they were able to wipe and restore systems from backups, but they paid a ransom to their attackers anyway in return for a promise that they would delete all of the stolen data and not provide or sell it to anyone else first.
Blackbaud first revealed that it was hit ..
Support the originator by clicking the read the rest link below.
