Advanced 90 min 6-12 players
Your systems are encrypted and the attackers have exfiltrated terabytes of sensitive data, threatening to publish it on their leak site within 48 hours. This advanced scenario escalates beyond traditional ransomware by forcing your team to confront two simultaneous crises: restoring operations and preventing a catastrophic data leak. Participants will wrestle with the ethics and legality of ransom payments, coordinate with cyber insurance providers and negotiation firms, manage board-level communications, and develop strategies when paying the ransom does not guarantee data deletion.