Makes sense. We have a company with bad security practices (not easy to fix), inadequate disaster recovery strategy (not easy to fix) and willing to pay money t

Makes sense. We have a company with bad security practices (not easy to fix), inadequate disaster recovery strategy (not easy to fix) and willing to pay money to criminals to make problems go away. Of course it's an ideal target. I wonder if by now the criminals compile and trade the list of easy target companies.