When people hear ransomware, they often picture a computer displaying a ransom note after files have been encrypted.
Modern ransomware can involve another threat: stolen information.
Attackers may copy sensitive data before disrupting systems and then threaten to publish it.
That changes how organisations need to prepare.
A backup can restore files, but it cannot undo the fact that information has already been copied.
Organisations therefore need data minimisation, access controls, monitoring and incident-response plans alongside backup systems.
For individuals, the same principle applies at a smaller scale. Do not store unnecessary sensitive information everywhere. Review old accounts and remove information you no longer need.
The less sensitive information an attacker can reach, the less useful a compromise becomes.