Ransomware and Sanctions Compliance: Considerations for Responses to Attacks

Last month, reports surfaced that fitness technology company Garmin may have made a multimillion dollar payment in response to a ransomware attack with reported links to Evil Corp, a Russian hacking group subject to U.S. sanctions.

This incident and other recent reports of ransomware attacks against large companies highlights that companies should consider potential civil and criminal liability under U.S. sanctions laws when responding to ransomware attacks.

Click here, to continue reading on the Cleary Cybersecurity and Privacy Watch blog.