A ransomware attack places the organization’s data at high risk, as cyberattackers can now exfiltrate. During Q2 2021, more than 80% of ransomware attacks also included the threat to leak stolen data.
The threat of leaking sensitive data to the public and to the Dark Web has become a ploy to threaten businesses with releasing potentially sensitive information.
The types of data that may be sensitive include:
Source code. Code that houses the building blocks of any proprietary software.
Proprietary information and systems. Databases that include trade secrets, business strategies, product designs, and even operational procedures.
Personal identifiable information (PII). Data that could identify a specific individual and can identify, contact, or locate a particular person on its own or with other information.
Protected health information (PHI). Information about health status, provision of health care, or health care payments that can link to a specific individual.
Customer lists. A data set that may contain PII, contact information, proprietary research, financial information, or competitive analysis. This data is usually intended for internal use only.