Fortra: Modern Ransomware Is Really Data Extortion

Name: Fortra: Modern Ransomware Is Really Data Extortion
Uploaded: 2026-07-05T13:41:30-04:00
Duration: 2 min
Description: Data is the asset and the target. Modern attacks aren’t about locking systems. They’re about stealing, exposing, and exploiting your data. From ransomware to accidental leaks, once it’s out, the damage doesn’t stop. What really happens after a breach? ...

Fortra

07/05/2026

0 (0%)

Report Like Favorite

TL;DR

Modern ransomware has evolved from locking systems to stealing and extorting data, making data ownership the primary risk rather than operational downtime.
Paying ransom demands may fund further criminal operations — the 'Hydra' effect — and offers no guarantee that stolen data will be returned or not re-exploited.
Data breaches extend beyond malicious attacks to include accidental exposures, each carrying serious compliance penalties and reputational damage that are difficult to quantify.

Summary

This short-form clip from Fortra's Art of Security series reframes how security practitioners should think about ransomware. The central argument is that modern ransomware attacks have fundamentally shifted from disrupting system access to targeting data ownership — making extortion, not encryption, the primary threat. The clip opens by establishing data's growing value across commercial, regulatory, and AI contexts, noting that global data volumes have reached unprecedented zettabytes spread across SaaS platforms, cloud stores, on-premise databases, and multiple jurisdictions. Threat actors have taken notice. Paying a ransom is framed as feeding a 'Hydra' — eliminating one threat only to fund the criminal infrastructure that spawns more. The clip also broadens the breach definition beyond malicious exfiltration to include accidental exposure events, such as misconfigured databases or misdirected emails, each carrying compliance fines and reputational consequences. The segment teases a full episode featuring Brent Arnold, a legal expert, litigator, and data breach coach, who joins security practitioners to examine what actually happens in the aftermath of a breach — the legal, regulatory, and operational fallout that most security teams are unprepared to navigate.

Chapters

0:00 - Why Data Has Value
0:21 - Consequences of Data Loss
0:52 - Ransomware as Extortion
1:21 - Accidental Breaches & Legal Fallout

Key Quotes

0:52 "Ransomware used to be more about losing access to your systems, but today it's more about losing ownership of the data and dealing with the fallout, unless you pay the extortion demand."
1:03 "When you pay the ransomware Hydra, you might have chopped off the head threatening your organization, only for the beast to grow three more heads when the funds are reinvested into the criminal operations."
1:13 "How can you be sure that the criminals will honor their word, return the data and not come after a second extortion payment? ..."
1:31 "Even these data breaches have consequences from specific compliance fines to almost unquantifiable reputational damage."

FAQ

Why is paying a ransomware demand considered risky?

Paying a ransom may eliminate the immediate threat but funds the criminal operation behind it, potentially enabling further attacks. There is also no guarantee that criminals will return the stolen data or refrain from demanding a second payment.

Are data breaches only caused by malicious hackers?

No. The clip explicitly notes that breaches also result from accidental exposures — such as publicly accessible databases or misdirected employee emails — which still carry compliance fines and significant reputational damage.

Categories:

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

07/09/2026

01:00 PM

07/09/2026

The HUMAN Experience: Empowering Agentic Trust in Practice

https://www.truthinit.com/index.php/channel/2026/the-human-experience-empowering-agentic-trust-in-practice/
07/14/2026

01:00 PM

07/14/2026

Crafting a Championship-Level Security Team for Unmatched Defense Success

https://www.truthinit.com/index.php/channel/2025/crafting-a-championship-level-security-team-for-unmatched-defense-success/
07/14/2026

02:00 PM

07/14/2026

Understanding the Crucial Role of Context in AI Data

https://www.truthinit.com/index.php/channel/2037/understanding-the-crucial-role-of-context-in-ai-data/
07/21/2026

04:00 AM

07/21/2026

Strategies for Managing AI Governance and Securing App-to-LLM API Traffic

https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
07/21/2026

01:00 PM

07/21/2026

HUMAN Dialogue: Insights from Attackers During the FIFA World Cup

https://www.truthinit.com/index.php/channel/2029/human-dialogue-insights-from-attackers-during-the-fifa-world-cup/
07/22/2026

06:30 AM

07/22/2026

Insights and Innovations in Data Privacy and Digital Protection

https://www.truthinit.com/index.php/channel/2000/insights-and-innovations-in-data-privacy-and-digital-protection/
07/28/2026

01:00 PM

07/28/2026

Illumio + Netskope: Zero Trust in the Age of AI Autonomy

https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
07/29/2026

04:00 AM

07/29/2026

Real-Time Strategies for Safeguarding Against Prompt Injections

https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
07/29/2026

12:00 PM

07/29/2026

Unified Data Security in Action: Uncover, Analyze, and Resolve Threats

https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
08/19/2026

12:00 PM

08/19/2026

Becoming Agent Ready: Insights from Cyera's Expertise

https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-from-cyeras-expertise/
09/30/2026

04:00 AM

09/30/2026

AI Command Center: Optimizing Visibility and Control in Your Operations

https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/