Incident responders report a clear shift: fewer encrypted networks, more data theft with a countdown clock. Skipping the encryption step avoids the noisiest part of an attack and sidesteps improved backup practices that made decryption keys less valuable.
What defenders should change
Backups no longer end the conversation. Egress monitoring, data classification and a rehearsed disclosure plan matter more than they did two years ago. Several insurers have updated questionnaires to ask about outbound traffic controls specifically.
Key takeaways
- Encryption is increasingly skipped in favour of theft
- Backups do not address publication threats
- Egress monitoring is now an insurance question
This story is part of our ongoing coverage of cybersecurity. We will update it as more details emerge.
