And, just to be certain, the hackers have also attempted to extort the individual companies. Salesforce has told the thieves to get lost, and we know that Qantas has refused to pay them as well.
Loading
So as far this heist goes, it strikes me that the cyberthieves are in a pretty poor negotiating position, which may explain why they are making so much noise this week.
There’s chatter that the hacks may have been perpetrated a few years ago, which suggests that the hackers have been unsuccessfully threatening catastrophe for quite some time. The criminals may have reportedly also reduced the amount they have been trying to extort, mainly due to their demands being ignored.
Paying ransoms to hackers is frowned upon in the corporate world, and companies are now additionally disinclined to pay up, given the type of information hackers usually pinch isn’t particularly sensitive for the average person.
Of course, in Qantas’ case, some of its VIP frequent flyer customers include senior politicians, corporate executives and members of the judiciary, who like to keep their details quiet. But for just about everyone else, email addresses, phone numbers and birthdates are not state secrets.
Loading
We hand them to supermarkets, real estate agents, energy retailers, phone companies and ride-sharing/food delivery companies like Uber. That’s for starters, and it begs the question, just how worried should we be now that the dark web contains our personal information and which type of sneaker we bought?
In the Medibank Private data breach the sensitive data stolen included information on medical conditions and passport details. That ended up in one of the servers of Russian hackers located in an industrial town on the West Siberian Plain, three hours’ drive from the Kazakhstan border.
But even armed with this information the Medibank Private hackers were unsuccessful in their attempts at extortion.
So a lot of the data being pilfered by the hackers is starting to lose its value in the market, mainly because a lot of that information is either already out there or it can’t be weaponised as much as it could have been in the past. That’s a blow to the business model of the hackers and is almost certain to make them go after bigger, more lucrative prizes.
That’s why complacency is the last thing we need when it comes to companies, and each of us individually, doing our best to stay safe on the internet. Getting your bank details stolen is definitely a cause for alarm. And the psychological impact of breaches being discovered can be very disturbing.
As for corporates, the stakes are even higher. Just ask Optus.
The Market Recap newsletter is a wrap of the day’s trading. Get it each weekday afternoon.