<story><title>Update on IT Security Incident at UCSF</title><url>https://www.ucsf.edu/news/2020/06/417911/update-it-security-incident-ucsf</url></story><parent_chain><item><author>mcny</author><text>If the data is worth paying a million dollar ransom to unlock, it is worth setting up proper backups. I for one am grateful to people who commit these crimes in which they &amp;quot;lock&amp;quot; data in place rather than sell it to the highest bidder.&lt;p&gt;Proper data hygiene isn&amp;#x27;t brain surgery. There is zero excuse for this event. I don&amp;#x27;t blame the criminals. I blame the university system. Shame!</text></item><item><author>hoomank3</author><text>The paid ransom, will unfortunately embolden the criminals to strike again in search of the next big payday. If it worked once, it could work again.</text></item></parent_chain><comment><author>brippalcharrid</author><text>&lt;p&gt;&lt;pre&gt;&lt;code&gt;    ... &amp;quot;lock&amp;quot; data in place rather than sell it to the highest bidder.
&lt;/code&gt;&lt;/pre&gt;
Why not both? And once the rightful owner of the data has paid a fat ransom, surely that&amp;#x27;s got to provide some kind of proof of its market value. The University did say that&lt;p&gt;&lt;pre&gt;&lt;code&gt;    The attackers obtained some data as proof of their action
&lt;/code&gt;&lt;/pre&gt;
so unless they&amp;#x27;re logging their outbound traffic, who&amp;#x27;s to say they didn&amp;#x27;t exfiltrate all of it? It&amp;#x27;s the kind of thing that the University would remain tight-lipped about unless they were either sure that it hadn&amp;#x27;t happened (doubtful, seeing as they aren&amp;#x27;t running a tight ship) or had some kind of mandatory reporting obligation for the data.</text></comment>
<story><title>Update on IT Security Incident at UCSF</title><url>https://www.ucsf.edu/news/2020/06/417911/update-it-security-incident-ucsf</url></story><parent_chain><item><author>mcny</author><text>If the data is worth paying a million dollar ransom to unlock, it is worth setting up proper backups. I for one am grateful to people who commit these crimes in which they &amp;quot;lock&amp;quot; data in place rather than sell it to the highest bidder.&lt;p&gt;Proper data hygiene isn&amp;#x27;t brain surgery. There is zero excuse for this event. I don&amp;#x27;t blame the criminals. I blame the university system. Shame!</text></item><item><author>hoomank3</author><text>The paid ransom, will unfortunately embolden the criminals to strike again in search of the next big payday. If it worked once, it could work again.</text></item></parent_chain><comment><author>codezero</author><text>Don’t entirely disagree, but also think it’s fair to say they almost certainly use the stolen data to find weaknesses in their next targets, so it’s not just a one to one thing. This doesn’t at all negate the main statement: good motivation to actually do proper backup and security.</text></comment>