Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by lurquer on Thursday May 13, 2021 @08:48PM
(#27149341)
It’s good practice for a cash business to make daily runs to deposit daily at the bank. Stupid to leave cash laying in the till overnight.
Which is why thieves rob banks.
But, money is fungible... if it’s stolen, it can be replaced. If the bank can’t replace it without going broke, the FDIC steps in and, essentially, prints more money to make you whole (up to a point.)
But, data is unique and irreplaceable.
If everyone is backing up to a smaller and smaller number of ‘cloud’ companies, it’s just centralizing the problem... putting everyone’s eggs in one basket.
I think three daily encrypted backups mandated by law would be enough to stop the multi-million dollar ransoms.
We will still see companies paying ransom for a business days loss, but not complete shutouts? And infrastructure specific operations, like this pipe line, should be air gapped.