Ransomware Gangs Turn to SEC Reporting as a New Tactic

ALPHV/BlackCat's recent move to report a ransomware case to the SEC may become the new normal in the ransomware economy, as the SEC's new disclosure ruling requires companies to report "material" cybersecurity incidents within four days. While some argue that this aggressive move could draw unwanted attention from law enforcement, it is likely that the SEC is already monitoring dark web exposure sites. It is important for organizations to prepare in advance for ransomware attacks by identifying critical systems and building resiliency into them, as 90% of organizations have experienced at least one ransomware attack in the last two years.