Ransomware Negotiator Pleads Guilty to Working with the Gang He Negotiated Against
What Happened
The individual pleaded guilty to running both sides of negotiations — taking fees from victim organizations while feeding intelligence and steering settlements to the criminal group. The case raises uncomfortable questions about the unregulated ransomware-response industry and victim due diligence.
My Take
The entire incident-response ecosystem operates on trust without verification, and that's about to change. Cyber insurance carriers will start requiring credentialing, conflict disclosures, and indemnification for any negotiator they reimburse. The honest firms will welcome it because the bad actors have been undercutting them for years. CFOs should add "negotiator background and conflict policy" to their incident-response runbooks today, not after the breach. The cost of not doing this just got priced in court records.
Read Original Source