Security News > 2021 > August > CISA shares guidance on how to prevent ransomware data breaches
The US Cybersecurity and Infrastructure Security Agency has released guidance to help government and private sector organizations prevent data breaches resulting from ransomware double extortion schemes.
"All organizations are at risk of falling victim to a ransomware incident and are responsible for protecting sensitive and personal data stored on their systems."
Additional info on how to defend against and respond to ransomware attacks is available in the fact sheet and on CISA's recently launched StopRansomware.
CISA's ransomware data breach guidance follows an almost continuous barrage of ransomware attacks targeting the US public and private sectors in recent years.
Since December 2019, CISA has issued multiple warnings to private industry partners, starting with info on LockerGoga and MegaCortex targeting worldwide organizations and a ransomware attack against a US natural gas compression facility, part of the critical US infrastructure sector.
The federal agency also released a new ransomware self-assessment security audit tool in June to help at-risk organizations understand how well they're equipped to defend against and recover from ransomware attacks targeting their information technology, operational technology, or industrial control system assets.
Protecting Sensitive and Personal Information from Ransomware-Caused Data Breaches https://www.cisa.gov/sites/default/files/publications/CISA_Fact_Sheet-Protecting_Sensitive_and_Personal_Information_from_Ransomware-Caused_Data_Breaches-508C.pdf