The hackers’ first attempt at communication was a short email sent to the CEO. The message s
at in the spam email folder. The CEO’s assistant routinely reviewed the spam email folder to
make sure no important message was misfiled. A busy week for the executive office delayed this routi
ne and unremarked task
The CEO read the email detailing data as “proof of hack”. She turned crimson as she read the demands for a bitcoin payment and a threat to expose the data on the dark web.
She called the General Counsel in, closed the door, told the tale, and began to fume.
“If this g
ets out to the press the Board will have my head. Do we have to tell anyone?”
The GC knew what was coming, and took care in answering.
“Yes. In fact, there is a protocol for who we need to call and when”
“Do we really have to tell the government?”
“Yes. Within 60 days.”
“What if I don’t want to?”
“Then it will get worse. Much worse.”
A hopeful inquiry,
“Does this have to be public?”
The GC responded steadily wit
h no affability.
“The media, social networks, and affected employees and patients will all know.”
“You know we’re running on fumes. There’s no money for this.”
At the CEO’s pause, the GC was gentle but firm.
“Sorry, you have no choices.”
“We pay lots of money so that this doesn’t happen.”
“This is only going to get more expensive.”
The CEO thought of the hours of budget meetings.
“How much?”
“I’ll find out. But the right people and results are going to be really expensive.”
“I’ll get this checked out and be ready if you want to call a meeting this afternoon.”
The CEO was moving, but the breach had a momentum all its own that waited for no-one.
Up Next - Bad News Travels Fast
Comments