[strictnein]

Absolute nonsense.

First of all, they are increasingly selling the data. They exfil first, lock second.

Second of all, these wonderful criminals are targeting all manners of institutions, not just large universities.

Proper data hygiene at large enterprise levels is, in fact, exceedingly difficult.

[vinay_ys]

  Proper data hygiene at large enterprise levels is, in fact, exceedingly difficult.

Creating a hermetically sealed IT environment where only way to exfiltrate data that remains is the employees eyeballs is definitely possible and is increasingly done well by a lot of large organizations.

Defending against insider threat (malicious employees) is still a challenge for most civilian (non-military) organizations.