Update on IT Security Incident at UCSF
1–10 of 150 posts
Re: Update on IT Security Incident at UCSF
#2Ouch. No backup?
Re: Update on IT Security Incident at UCSF
#3The paid ransom, will unfortunately embolden the criminals to strike again in search of the next big payday. If it worked once, it could work again.
Re: Update on IT Security Incident at UCSF
#4The paid ransom, will unfortunately embolden the criminals to strike again in search of the next big payday. If it worked once, it could work again.
They ain’t doing it for the love of the game!
Re: Update on IT Security Incident at UCSF
#5How did they not have backups of important data?
Re: Update on IT Security Incident at UCSF
#6Don’t they have insurance for these things? A small college near me had an attack like this but paid via insurance.
Re: Update on IT Security Incident at UCSF
#7The paid ransom, will unfortunately embolden the criminals to strike again in search of the next big payday. If it worked once, it could work again.
Optimistic counterpoint: a high-profile, (relatively) high-value ransom payout like USC's may incentivise other orgs vulnerable to this kind of attack to take steps to prevent this kind of issue.
Anything from restricting program capabilities/permissions for external executables, to keeping "colder" backups of business-critical data, to monitoring and responding to software that looks like it's traversing the whole filesystem, could reduce the harm ransomware causes.
Re: Update on IT Security Incident at UCSF
#8Ouch. No backup?
It's pretty obvious that the answer is 'no backup'...
Re: Update on IT Security Incident at UCSF
#9What kind of data is worth at least a million dollars and isn't properly backed up? Unbelievable. Some heads should roll .
Re: Update on IT Security Incident at UCSF
#10The paid ransom, will unfortunately embolden the criminals to strike again in search of the next big payday. If it worked once, it could work again.
If the data is worth paying a million dollar ransom to unlock, it is worth setting up proper backups. I for one am grateful to people who commit these crimes in which they "lock" data in place rather than sell it to the highest bidder.
Proper data hygiene isn't brain surgery. There is zero excuse for this event. I don't blame the criminals. I blame the university system. Shame!