Varonis: How Hackers Shifted from Encryption to Data Theft

Name: Varonis: How Hackers Shifted from Encryption to Data Theft
Uploaded: 2026-08-23T09:28:46-04:00
Duration: 20 s
Description: Learn how hackers' processes have changed in the age of AI. Previously, hacking groups (like the Shiny Hunters hacking group) would encrypt and hold the unlock behind a ransom. Now, they just steal data and use that as leverage.

Varonis

08/23/2026

0 (0%)

Report Like Favorite

TL;DR

Modern attackers have shifted from encryption-based ransomware to data theft, using stolen sensitive information as leverage instead of locking systems.
Threat groups like ShinyHunters now locate and query data intelligently, targeting high-value assets such as PII and payment contracts regardless of where data resides.
The absence of encryption makes these attacks harder to detect, rendering traditional ransomware defenses and backup strategies less effective against this evolving threat.

Summary

This short-form clip from Varonis captures a critical shift in modern attacker behavior: ransomware groups have largely abandoned encryption-first tactics in favor of pure data exfiltration. Where threat actors like ShinyHunters once relied on locking victims out of their own systems to demand ransom, the new playbook prioritizes stealing sensitive data and using it as leverage directly. Attackers no longer need to encrypt anything — they simply locate data wherever it lives, query it intelligently to extract high-value assets like PII and payment contracts, and threaten exposure. The message is stark: perimeter defenses and backup strategies alone are insufficient when adversaries can find, access, and exfiltrate your most sensitive information without triggering traditional ransomware detection. Organizations must rethink data security posture to account for this stealthier, data-centric threat model.

Chapters

0:00 - Encryption vs. Data-First Attacks
0:06 - How Attackers Find and Query Data
0:16 - High-Value Targets: PII and Contracts

Key Quotes

0:00 "Attacks predominantly used to be encryption first. Now it's data first, practically no encryption."
0:06 "It doesn't matter where the data is, they will find where that data is."
0:10 "If they see it and they find it and they can query it, they will query it with a really good query that gets all the nice stuff they want out of there."
0:19 "They want the leverage."

FAQ

Why have attackers moved away from encryption-based ransomware?

Encryption requires more effort and can be countered with backups. Data theft is stealthier, harder to detect, and equally effective as leverage — attackers simply threaten to expose stolen PII or contracts rather than locking systems.

What types of data are attackers targeting in these exfiltration-first attacks?

According to the clip, attackers specifically seek high-value assets like PII data and payment contracts — information that creates maximum legal, financial, and reputational exposure for victims.

Categories:

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

10/13/2026

01:00 PM

10/13/2026

Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

https://www.truthinit.com/index.php/channel/2159/transitioning-from-cjis-to-ferpa-essential-audit-evidence-for-compliance/
10/15/2026

11:00 AM

10/15/2026

Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
10/20/2026

11:00 AM

10/20/2026

Harnessing Data Governance for AI with Cyera and Snowflake

https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
10/27/2026

11:00 AM

10/27/2026

Maximize Security, Value, and Returns on Your Microsoft Investment

https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
10/27/2026

01:00 PM

10/27/2026

The HUMAN Experience: Real-Time Insights into Page Intelligence

https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
11/04/2026

11:00 AM

11/04/2026

Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape

https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
11/04/2026

11:00 AM

11/04/2026

Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions

https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
11/05/2026

02:00 PM

11/05/2026

HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI

https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
11/05/2026

02:00 PM

11/05/2026

Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption

https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
11/19/2026

01:00 PM

11/19/2026

360View: Govern, Secure & Recover Your Microsoft 365 Environment

https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/