Can ransomware steal data?
Most ransomware attacks result in data being encrypted or locked, not stolen however we are seeing this trend change in 2020. Hackers are more frequently stealing data and are requesting larger ransom demands to not leak the data. Ransomware itself is typically not designed to exfiltrate data. However, when an attacker has a foothold in the network, they can stage or exfiltrate files. If this happens, you are required to report a ransomware attack.
A digital forensics investigation can trace the attacker's steps to determine if your data was stolen or compromised. Learn more about why you need a digital forensics report to ensure you are abiding by data breach notification laws for Personally Identifiable Information (PII) or information protected under the Health Insurance Portability and Accountability Act (HIPAA).