Tag

Ransomware

Explore how ransomware attacks work, how they infiltrate networks, and what steps individuals and organizations can take to prevent, detect, and recover from ransomware incidents. Articles cover recent ransomware variants, encryption tactics, backup strategies, and incident response planning.

posts

Incident Response Plan Template

Incident Response Plan Template: Build Yours in 2026

A Ransomware Attack Every 11 Seconds — and Most Victims Had No Plan When Colonial Pipeline got hit in May 2021, the company paid a $4.4 million ransom within hours. Their CEO later told a Senate committee that the decision was made under extreme pressure, without a well-rehearsed playbook. If

Carl B. Johnson May 16, 2026 5 min read
Ransomware Attack Prevention

Ransomware Attack Prevention: What Actually Works in 2026

A Single Click Cost Change Healthcare $22 Million in Ransom In February 2024, the BlackCat/ALPHV ransomware group crippled Change Healthcare — a company processing roughly one-third of all U.S. health claims. UnitedHealth Group confirmed paying a $22 million ransom. Patient data for over 100 million individuals was compromised. The

Carl B. Johnson May 14, 2026 5 min read
Trojan Horse Malware

Trojan Horse Malware: What It Really Does Inside Your Network

The Invoice That Took Down a Hospital Network In 2023, a hospital system in Illinois watched helplessly as Qakbot — a trojan horse malware strain — moved laterally through its entire Active Directory environment in under four hours. The initial infection? A single employee opened what looked like an overdue vendor invoice

Carl B. Johnson May 09, 2026 5 min read
Cloud Storage Security Risks

Cloud Storage Security Risks: What's Actually Exposing You

A Single Misconfigured Bucket Exposed 3 Billion Records In 2021, Cognyte left an unsecured database containing over 5 billion records — scraped from previous breaches — sitting in a cloud storage instance with no authentication required. Anyone with a browser could reach it. That's not a sophisticated nation-state attack. That&

Carl B. Johnson May 09, 2026 5 min read
Data Breach

What Causes a Data Breach: 7 Root Causes in 2026

In 2023, MGM Resorts lost an estimated $100 million after a threat actor called a help desk, impersonated an employee found on LinkedIn, and talked their way into the network. No zero-day exploit. No nation-state tooling. Just a phone call. If you want to understand what causes a data breach,

Carl B. Johnson Apr 30, 2026 5 min read
Ransomware Recovery Steps

Ransomware Recovery Steps: A Battle-Tested Playbook

In February 2024, Change Healthcare — a subsidiary processing roughly one-third of all U.S. medical claims — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted pharmacy operations nationwide for weeks, cost UnitedHealth Group an estimated $872 million in the first quarter alone, and exposed the personal health data

Carl B. Johnson Apr 25, 2026 5 min read
Incident Response

How to Respond to a Cyberattack: A Practical Guide

In February 2024, Change Healthcare — the largest medical claims processor in the United States — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted billing systems for hospitals and pharmacies nationwide for weeks. UnitedHealth Group later confirmed the breach affected approximately 100 million individuals. If you think your organization

Carl B. Johnson Apr 25, 2026 5 min read
Ransomware Recovery

Ransomware Recovery Steps: A Battle-Tested Playbook

The Clock Starts the Moment You See the Ransom Note In February 2024, Change Healthcare — one of the largest health payment processors in the United States — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted pharmacy operations, delayed insurance claims, and affected an estimated one-third of all Americans&

Carl B. Johnson Apr 14, 2026 5 min read