Lessons from a Cyberattack

The video features two individuals, Kathleen and Sherry, sharing their experiences with cybercrime. Kathleen discusses a ransomware attack on her small business, detailing the challenges of data recovery and communication with the hacker. Sherry recounts an email compromise incident at her non-profit, highlighting the complexities of cybercrime reporting and enforcement. Both emphasize the importance of cybersecurity insurance and preventive measures. The session concludes with a Q&A addressing specific questions about their experiences and future prevention strategies.

What was the initial sign that Kathleen's company had been hacked?

• A warning from antivirus software

• A system crash

• Emails not being received

• A sudden increase in spam emails

How did Kathleen's company eventually communicate with the hacker?

• Through a phone call

• Via email

• Using a chat application

• Through Bitcoin transactions

What was the main challenge Sherry faced in dealing with the email compromise?

• Identifying the hacker

• Understanding the spoofing technique

• Recovering lost funds

• Notifying affected clients

What was Sherry's initial response to discovering the email compromise?

• Contacting the FBI and local police

• Hiring a private investigator

• Shutting down all email accounts

• Issuing a public statement

What is a key takeaway regarding the impact of cybercrime on small businesses and non-profits?

• They are rarely targeted by cybercriminals

• They often lack the resources to effectively respond

• They can easily recover without external help

• They are well-prepared for such incidents

What proactive measure did both Kathleen and Sherry emphasize as important?

• Avoiding online transactions

• Switching to a different email provider

• Investing in cybersecurity insurance

• Hiring more IT staff

What did Kathleen believe about the inevitability of cyber attacks?

• They are unlikely to happen again

• They only target large corporations

• It's a matter of when, not if

• They can be completely prevented

How did Sherry's experience influence other non-profits?

• They ignored the risk of cybercrime

• They increased their cybersecurity measures

• They stopped using email for transactions

• They collaborated to form a cyber task force

What was Kathleen's approach to communicating with her employees and clients after the attack?

• Providing minimal information

• Keeping it a secret

• Being honest and transparent

• Blaming external factors

What did Sherry learn about the role of the Secret Service in cybercrime investigations?

• They only handle cases over a million dollars

• They are not involved in cybercrime

• They can be more effective than the FBI

• They focus on international cases