{"id":497125,"date":"2026-06-17T09:58:09","date_gmt":"2026-06-17T09:58:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/497125\/"},"modified":"2026-06-17T09:58:09","modified_gmt":"2026-06-17T09:58:09","slug":"privacy-and-ransomware-risks-intertwine-as-threat-actors-change-tactics","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/497125\/","title":{"rendered":"Privacy and ransomware risks intertwine as threat actors change tactics"},"content":{"rendered":"<p>Source: <a href=\"https:\/\/www.marsh.com\/en-gb\/services\/cyber-risk\/insights\/cyber-catalyst.html\" rel=\"nofollow noopener\" target=\"_blank\">Cyber catalyst report: Guiding priorities in cyber investments<\/a><\/p>\n<p>1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Shifting ransomware tactics shine a spotlight on privacy risks<\/p>\n<p>Amid a complex regulatory landscape, threat actors are leveraging privacy lapses to scale widespread attacks. New tactics include incremental data leaks to pressure organizations to pay ransom, leading to both financial and reputational concerns. Ransom payments represent only a fraction of the total financial impact. Operational downtime, recovery expenses, legal fees, regulatory fines, and reputational harm often far exceed ransom amounts. Supply chain attacks are becoming a preferred vector, exploiting vulnerabilities in interconnected vendors and service providers to amplify disruption across entire ecosystems.<\/p>\n<p>2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 The regulatory landscape is evolving with increased litigation creativity<\/p>\n<p>The privacy regulatory landscape in Europe is shaped by the GDPR and a patchwork of other laws, including local ones. Further, organizations doing business in other countries, such as the US, need to navigate country- and state-specific regulations, creating increased operational complexity. The evolving enforcement landscape and creative litigation strategies by plaintiffs\u2019 attorneys are notable concerns for European companies.<\/p>\n<p>3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 AI amplifies risks<\/p>\n<p>While generative artificial intelligence has not yet created a new category of risks, it can amplify existing and familiar ones. Most impactfully, AI tools may enable even less technically skilled threat actors to execute complex intrusions into companies\u2019 systems. For instance, threat actors might leverage AI to automate their scouting activities and develop more persuasive social engineering campaigns, potentially heightening the likelihood of incidents that compromise privacy-sensitive data. While the current perspective of Marsh\u2019s cyber specialists is that AI-related privacy risks are already contemplated under broad cyber coverage, insurer responses may differ and insurers remain vigilant in tracking ongoing AI-related litigation concerning alleged privacy infringements.<\/p>\n<p>Four actions to mitigate privacy and ransomware risks<\/p>\n<p>The <a href=\"https:\/\/www.marsh.com\/en-gb\/services\/cyber-risk\/insights\/cyber-catalyst.html\" rel=\"nofollow noopener\" target=\"_blank\">Cyber catalyst report: Guiding priorities in cyber investments<\/a> indicates that 68% of European organizations are very confident in their company\u2019s ability to manage cyber risk, slightly less than the global average (see Figure 3).\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"Source: Cyber catalyst report: Guiding priorities in cyber investments 1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Shifting ransomware tactics shine a spotlight on privacy&hellip;\n","protected":false},"author":2,"featured_media":497126,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[127,14330,15311,17667,114,39244,28535,2115,57910,64,4415,3127,7727,916,8249,85,12110,46,2971,17471,4428,4429,18167,8446,4436,17673,31196,39245,228897,62410,10496,2727,4056,1582,1594],"class_list":["post-497125","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-article","tag-azerbaijan","tag-belgium","tag-bulgaria","tag-business","tag-croatia","tag-cyber-risk","tag-cyprus","tag-czech-republic","tag-denmark","tag-estonia","tag-finland","tag-global","tag-greece","tag-hungary","tag-il","tag-ireland","tag-israel","tag-italy","tag-kazakhstan","tag-latvia","tag-lithuania","tag-luxembourg","tag-norway","tag-poland","tag-portugal","tag-romania","tag-serbia","tag-silent-cyber-risk","tag-slovakia","tag-slovenia","tag-spain","tag-sweden","tag-turkey","tag-ukraine"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/497125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=497125"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/497125\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/497126"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=497125"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=497125"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=497125"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}