Skip to main content
3 reportsPriority Low

Ransomware without data theft breach risks

A white paper highlights how ransomware attacks without data theft may still require breach reporting under UK data protection laws, affecting organisations' compliance obligations.

First report Latest

What is going on

  • A white paper from K7 CyberSecurity warns that ransomware attacks without data theft could still trigger breach reporting requirements under the UK's Data Protection and Privacy Act.
  • The report raises concerns about organisations needing to assess whether their systems or suppliers have been exposed to such ransomware operations.
  • The issue emerges as separate incidents involving universities and cryptocurrency thefts highlight ongoing cyber threats across sectors.
  • What to watch: Further clarification from regulatory bodies on how breach reporting obligations apply to ransomware attacks without data theft.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed