> All companies and governments should take the stance that any randomwared or compromised data is now public. That's a somewhat reasonable stance. You definit

> All companies and governments should take the stance that any randomwared or compromised data is now public. That's a somewhat reasonable stance. You definitely have no guaranteed assurance that it won't be leaked. However... depending on what you do have set up, you may have some reasons to believe that 45GB of encrypted data has not left your internal network (i.e. was only encrypted-in-place) > And if they don't have the backups, then they should consider it permanently lost. That's easy to say but way harder in practice. If the data in question is the design artifacts from a billion dollar project... it'd be a pretty hard sell to convince everyone "woops, we fucked up, billion dollars gone, time to close the doors and go home, we definitely shouldn't consider paying $500k or $1M or whatever they want to get all this data back".