Ransomware Undressed

A customer's HR department was affected by a piece of ransomware. In the ensuing proceedings before the local data protection authority the question of whether PII was accessed or exfiltrated was the essential point

i.s.c. saved the customer from any GDPR-related fine by proving through full reverse-engineering of the ransomware that no PII was accessed or exfiltrated.