80% of orgs that paid the ransom were hit again

Re:80% of orgs that paid the ransom were hit again by bottled_poe on Friday June 18, 2021 @11:11PM (#27557396)

Well then, It’s starting to sound like backups aren’t what a business needs.

[ Parent | on HN ]

Re:80% of orgs that paid the ransom were hit again by des1nderlase on Saturday June 19, 2021 @02:30AM (#27558289)

Backups are there to provide a business continuity in wide range of disruptions. What you want to protect your business from is up to you, but typically you need protection from all things OP mentioned.

[ Parent | on HN ]

Re:80% of orgs that paid the ransom were hit again by VendorManager on Sunday June 20, 2021 @02:06AM (#27567567)

Backups and disaster recovery sites are definitely important from business continuity perspective, but there is a bigger risk of leaking PII and other sensitive information such as SIN / Social security numbers if the software vendor has access to it. Your business might be able to recover from backup if the hacker has not encrypted it, but the hacker for sure will be maliciously using the PII information to send phishing emails.

[ Parent | on HN ]

Re:80% of orgs that paid the ransom were hit again by failwhaleshark on Monday June 21, 2021 @12:14AM (#27576260)

These are somewhat orthogonal issues.

1. Test and encrypt backups.

2. Don't get hacked. Defense-in-depth philosophy and rigorous, routine social-engineering training/testing. If you get hacked, it's usually game over. Defend systems like the business depends on it because it does.

3. Limit exfil: extra security for PII, exfil detection, and [HN]I[DP]S.

[ Parent | on HN ]