Data Recovery: Paying Extortionists to Protect Customers Is Not Illegal, But It May Be Risky
- Date:June 24, 2019
- Author(s):
- Sean Sposito
- Report Details: 4 pages, 2 graphics
- Research Topic(s):
- Cybersecurity
- Fraud & Security
- PAID CONTENT
Overview
The popular conversation around ransomware has shifted from detection to remediation. Hospitals, municipalities, and other victims frequently end up paying their extortionists through third parties promising data recovery services. A recent spate of media reports discuss the convenience and dilemmas of giving in to extortion:
- In May, Propublica, a nonprofit news organization dedicated to investigative journalism, reported that vendors who promise ransomware solutions mostly end up negotiating with their clients’ extortionists.1
- Earlier in the month, CBS’ “60 Minutes” described “why,” in the case of ransomware, “the best solution is often paying a ransom.”2
- And a Boston Globe Q&A with the author of the Propublica report, in part, put the city of Baltimore’s decision not to pay its extortionists demands for 13 bitcoins – roughly $104,000 – into context.3
But what about broader data recovery practices? All of this media coverage has no doubt created internal business questions about both the ethics of paying for decryption keys and the practice of paying cybercriminals in general. These are questions that security executives should be prepared to answer in the elevator, over email, and in meetings.
Learn More About This Report & Javelin
Related content
Cyber Lessons for Mobile Banking: Connecting with Consumers, Framing Cyber Awareness
Javelin Strategy & Research sees an increased opportunity for cybersecurity awareness and engagement with consumers within mobile banking, where push notifications and alerts are a...
Wealth Accounts at Increasing Risk of Scams and Cyber Takeovers
Romance scams are hard to detect. Wealth management clients are often affected by the most devastating and nefarious types of scams—scams that are long-running and result in the pe...
Unmasking the Threat of AI: Deepfakes and Financial Security
Deepfakes fueled by AI are fast approaching being able to reliably circumvent voice biometrics authentication and facial recognition algorithms. When deepfakes cross this threshold...
Make informed decisions in a digital financial world