Hacker News Reader

If you had good backups, you didn't had to pay until now.

But to make the data public, they have to download all the data first. This might be detected.

I know from several companys who did set up the complete network again.

The most prominent company I know at moment is Pilz (pilz.com). There website was almost down for a month. Now after 2 months it possible to download datasheets and manuals again.

View on HN

To be fair, if you are taken over by ransomware, it's probably the best decision to start from scratch and redesign your network so that this sort of thing is mitigated in the future.

Who said these things come from "your" network?

Because if it's an insider threat then you should have protections in place to identify bad actors so that they know they will be caught if they even try. If you don't then what are you even doing?

One thing to do to slow down such downloading is to add a great deal of bulk "junk" data, and have a rate limited network connection.

Reply on news.ycombinator.com