The hackers’ first attempt at communication was a short email sent to the CEO. The message sat in the spam email folder. The CEO’s assistant routinely reviewed the spam email folder to make sure no important message was misfiled. A busy week for the executive office delayed this routine and unremarked task
The CEO read the email detailing data as “proof of hack”. She turned crimson as she read the demands for a bitcoin payment and a threat to expose the data on the dark web.
She called the General Counsel in, closed the door, told the tale, and began to fume.
“If this gets out to the press the Board will have my head. Do we have to tell anyone?”
The GC knew what was coming, and took care in answering.
“Yes. In fact, there is a protocol for who we need to call and when”
“Do we really have to tell the government?”
“Yes. Within 60 days.”
“What if I don’t want to?”
“Then it will get worse. Much worse.”
A hopeful inquiry,
“Does this have to be public?”
The GC responded steadily with no affability.
“The media, social networks, and affected employees and patients will all know.”
“You know we’re running on fumes. There’s no money for this.”
At the CEO’s pause, the GC was gentle but firm.
“Sorry, you have no choices.”
“We pay lots of money so that this doesn’t happen.”
“This is only going to get more expensive.”
The CEO thought of the hours of budget meetings.
“How much?”
“I’ll find out. But the right people and results are going to be really expensive.”
“I’ll get this checked out and be ready if you want to call a meeting this afternoon.”
Comentarios