“All Your Files Have Been Encrypted!” ̶Ransomware Attack at Keystone Insurance

Abstract

This case describes a ransomware attack and the response and recovery effort at a small insurance company in Boston in 2019. Through the incident of a security breach, the case examines the rising trend in ransomware attacks and the dilemma faced by ransomware attack victims. It explains the importance of an information security framework, such as the Written Information Security Program (WISP) mandated by Massachusetts Law. Besides the general security management concepts, the case also presents a fair number of technical details in small business computer networks and digital forensics for responding to and recovering from security breaches.