Hacker News Reader

TLDR; if your company / city has millions invested in a cyber infrastructure get cyber insurance. :facepalm:

Also $76,000 is oddly low... like low enough to be the price of a well established firm to do a pen test on your network...

View on HN

True, but managers also usually fail to account for the time and cost of remediation after a pentest.

Had the city engaged in the pentest, would there have been an appetite to spend 10-20x that amount on remediation?

Paying the ransom doesn't cover the need to spend money on fixing the problems. Having a ransom payer mark on the organization raises the security requirement, doesn't it?

For personal ransomware, the requests are average around $250, lower than you'd think.

Reply on news.ycombinator.com