Ransomware attackers are more likely to be paid, and receive higher amounts, if they exfiltrate data from victims, according to a study by the University of Twente. The research found that 40% of organisations paid in cases of exfiltration, compared to just 25% where no exfiltration occurred. Companies were more likely to pay if they enlisted the help of an incident response company and less likely to pay if they had recoverable backups.
UnitedHealth hid its Change Healthcare data breach notice for months
UnitedHealth’s healthtech company, Change Healthcare, which lost sensitive data of over 100 million people in a 2024 ransomware attack, has finished notifying most of the