Recent incidents show ransomware groups increasingly skipping encryption in favor of pure data theft and extortion. Response playbooks are being updated.

Insurers are tightening requirements around data loss prevention controls.