Are ransomware attacks data breaches?
Some may be considered data breaches. A should be used to determine the extent of your specific ransomware attack. A forensics report outlines crucial details about the malicious activity on your network during the ransomware attack. This report can include information indicating if confidential folders, files, and user accounts were accessed or exfiltrated from your network.
Unless the investigation determines a low probability of data being accessed or compromised during a ransomware attack, the attack is considered a data breach and your organization must determine notification requirements.
Regardless of the probability of a data breach, you should always report a ransomware attack to law enforcement for investigation.