Incident responders report a continued shift away from file encryption toward pure data-exfiltration extortion.
Victims face reputational and regulatory exposure even when backups fully restore operations.
Cyber insurers are adjusting coverage terms accordingly.
