Cyber insurance giant CNA paid out $40 million to its ransomware attackers

Cyber insurance giant CNA paid out $40 million to its ransomware attackers


Back in March, insurance firm CNA Hardy had much of its IT system knocked out by a ransomware attack, and sensitive data stolen.


That’s not a good look for a firm that sells cyber insurance.


And what’s also pretty ugly is that Bloomberg reports that CNA chose to pay an eye-watering $40 million to the cybercrime gang that launched the ransomware attack.


Jeepers!




Sign up to our newsletterSecurity news, advice, and tips.

As security researcher Kevin Beaumont adroitly points out on Twitter, it’s makes one raise an eyebrow at some of the things CNA Hardy has said in the past on the topic of ransomware.


For instance:






“A ransomware attack can have a devastating impact on business. Developing a breach plan and knowing what steps to take in the event of an attack could help save a business.” – Brian Robb, CNA.



He’s not wrong.


(According to his LinkedIn profile, Robb left CNA Hardy last month to start a job as head of cyber at a different insurance firm. One imagines it might have looked better on his resume if he had moved o ..

Support the originator by clicking the read the rest link below.