Fortra: Modern Ransomware Is Really Data Extortion

Name: Fortra: Modern Ransomware Is Really Data Extortion
Uploaded: 2026-07-05T13:41:30-04:00
Duration: 2 min
Description: Data is the asset and the target. Modern attacks aren’t about locking systems. They’re about stealing, exposing, and exploiting your data. From ransomware to accidental leaks, once it’s out, the damage doesn’t stop. What really happens after a breach? ...

Fortra

07/05/2026

0 (0%)

Report Like Favorite

TL;DR

Modern ransomware has evolved from locking systems to stealing and extorting data, making data ownership the primary risk rather than operational downtime.
Paying ransom demands may fund further criminal operations — the 'Hydra' effect — and offers no guarantee that stolen data will be returned or not re-exploited.
Data breaches extend beyond malicious attacks to include accidental exposures, each carrying serious compliance penalties and reputational damage that are difficult to quantify.

Summary

This short-form clip from Fortra's Art of Security series reframes how security practitioners should think about ransomware. The central argument is that modern ransomware attacks have fundamentally shifted from disrupting system access to targeting data ownership — making extortion, not encryption, the primary threat. The clip opens by establishing data's growing value across commercial, regulatory, and AI contexts, noting that global data volumes have reached unprecedented zettabytes spread across SaaS platforms, cloud stores, on-premise databases, and multiple jurisdictions. Threat actors have taken notice. Paying a ransom is framed as feeding a 'Hydra' — eliminating one threat only to fund the criminal infrastructure that spawns more. The clip also broadens the breach definition beyond malicious exfiltration to include accidental exposure events, such as misconfigured databases or misdirected emails, each carrying compliance fines and reputational consequences. The segment teases a full episode featuring Brent Arnold, a legal expert, litigator, and data breach coach, who joins security practitioners to examine what actually happens in the aftermath of a breach — the legal, regulatory, and operational fallout that most security teams are unprepared to navigate.

Chapters

0:00 - Why Data Has Value
0:21 - Consequences of Data Loss
0:52 - Ransomware as Extortion
1:21 - Accidental Breaches & Legal Fallout

Key Quotes

0:52 "Ransomware used to be more about losing access to your systems, but today it's more about losing ownership of the data and dealing with the fallout, unless you pay the extortion demand."
1:03 "When you pay the ransomware Hydra, you might have chopped off the head threatening your organization, only for the beast to grow three more heads when the funds are reinvested into the criminal operations."
1:13 "How can you be sure that the criminals will honor their word, return the data and not come after a second extortion payment? ..."
1:31 "Even these data breaches have consequences from specific compliance fines to almost unquantifiable reputational damage."

FAQ

Why is paying a ransomware demand considered risky?

Paying a ransom may eliminate the immediate threat but funds the criminal operation behind it, potentially enabling further attacks. There is also no guarantee that criminals will return the stolen data or refrain from demanding a second payment.

Are data breaches only caused by malicious hackers?

No. The clip explicitly notes that breaches also result from accidental exposures — such as publicly accessible databases or misdirected employee emails — which still carry compliance fines and significant reputational damage.

Categories:

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Ensuring Compliance Through Audit Evidence: From CJIS to FERPA

Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

Harnessing Data Governance for AI with Cyera and Snowflake