Hacker News new | ask | show | jobs
by terminalbraid 30 days ago
> We received digital confirmation of data destruction (shred logs).

This is shockingly naive

4 comments

I imagine they are not naive, they're counting on their clients being naive.
What's to say they didn't copy the data then shred a copy, or hell even just fabricate some shred logs.
In the abstract, it’s hilarious to imagine the hackers keeping the data, then some time from now leaking it accidentally (or another hacker group hacks them) then them having to issue a public apology for not having kept the stolen data secure and having lied about shredding it.
However, they could use it as a last resort or as a final "gift" before getting arrested or switching identities.

They might be considered "trustworthy" right now to get companies to pay them money, but no one will know what will happen in a few years when this strategy won't work anymore.

Anyway, I hope this doesn't come at all, or as late as possible.

> but no one will know what will happen in a few years when this strategy won't work anymore.

Good point.

> Anyway, I hope this doesn't come at all, or as late as possible.

Same. As I said, I find the idea funny in the abstract, if it didn’t affect anyone or if it were a TV show, for example. But since it does affect real people…

Hackers have an incentive to destroy the data as promised, because if it becomes a trend where the data is leaked despite the ransom being paid, no one would pay ransoms in the future.

Obviously this doesn't stop hackers from selling the data anyway and say "it wasn't us, someone else got the same data through a different hack".

Gotta hope that's just a PR attempt to try to save face. Though I wish companies would stop claiming it.