Re:US travel firm $4.5M ransom negotiation open chat
by nightcracker on Sunday August 02, 2020 @09:28PM
(#24033286)
Ok, and now a hospital with critical medical information gets hit by the ransom. What then?
[ Parent
| on HN ]
Re:US travel firm $4.5M ransom negotiation open chat
by chrisrogers on Sunday August 02, 2020 @10:53PM
(#24033773)
Well in the case of UCSF, they paid $1.14M[1].
But really, I expect such a law would provide for exceptions, with a maximum payout capability. And for such a law to come after an offsite airgap backup requirement for such entities.
But really, the answer is that the equivalent physical criminal action: walking into a hospital and absconding with all of their medical records, would result in criminal action against the thief. Their actions may be akin to manslaughter if deaths result.
[1]: https://www.ucsf.edu/news/2020/06/417911/update-it-security-...