Should we pay the ransom?

That is a business and legal decision, and law-enforcement agencies advise against paying: it funds the attackers, does not guarantee that the files come back or that stolen data is deleted, and paying a sanctioned group can be illegal. Decide with your incident-response provider, your insurer and your lawyers, and report the incident to the police and, where it applies, to your CSIRTCSIRT: computer security incident response team. The national team to which serious incidents are reported.. NetSenX does not negotiate or restore data; it helps you see earlier what the attackers did on the network.

Read next

Terms used here

CSIRT (computer security incident response team)
The national team to which serious incidents are reported.

← All 60 questions on Incident responseAll topics