“[T]he U.S. Department of Justice should determine and make clear that paying a ransom is illegal,” Hathaway said in an article posted May 13 by the Institute for New Economic Thinking. “This step would likely force organizations to further invest in their security and ability to withstand and recover from an incident (i.e., increase their resilience). Categorizing ransom payment as an illegal activity would also clearly remove coverage for these types of payments from insurance policies,” Hathaway wrote.” — Charlie Mitchell, Inside Cybersecurity
