a day ago
- The 'pay or don't pay' dilemma for hackers not to leak data is a hot topic.
- Grafana chose not to pay, while other companies 'reached agreements' (i.e., paid ransom).
- There is concern about the normalization of ransom payments and language that deflects from their criminal nature.
- Instructure's phrase 'reached an agreement with the unauthorised actor' waters down the severity.
- The 'pay or leak' model appears to be the new norm, along with statements like 'the data was returned to us'.