TLDR Tech / InfoSec
How Often Do Threat Actors Default On Promises to Delete Data?
DataBreaches conducted a survey among incident response firms and the infosec community via LinkedIn to determine how frequently ransomware groups uphold their pledges to delete data after receiving payment. The findings indicate that respondents rarely encountered instances of repeat extortion or confirmed data retention by the same threat actor, suggesting that most groups adhere to the transactional terms. However, one notable exception involved a client whose data was removed from the attacker's primary infrastructure but remained on unscrubbed exfiltration intermediaries.
Read the full story