One day I got a call from Sarah*, the in-house counsel at a large financial institution. “Our [information security] team was doing a routine search and found a list of our employee passwords for sale on the dark web,” she told me. “The business folks want to buy it back. What should we do? Should we buy it ourselves? Are there any downsides?”
If you purchase your company’s data, it could not only make the data itself more expensive — you also risk getting a reputation as a company that will pay up, making you an even more desirable target for future cyber extortion and ransom attacks.
narrate narrate_article