Threat video1:00
DPDP Rules 2025 Ransomware Reporting: Analysis & Hunting
Ransomware that locks personal data may be a reportable DPDP breach with no size floor: 9 detection rules, 6 IOCs and a free Splunk SPL rule.
Read the full threat intel for DPDP Rules 2025 Ransomware Reporting: Analysis & Hunting →
Chapters
- 0:00The hookInaccessible data may be a reportable breach.
- 0:04The storyK7 says no minimum size.
- 0:12Attack pathRansomware can make personal data inaccessible, according to K7.
- 0:26AttributionNo threat actor is attributed.
- 0:31Indicators of compromiseNo malicious indicators were published.
- 0:37MITRE ATT&CK techniques4 ATT&CK techniques, from initial access to impact.
- 0:42Remediation2 steps now: Add a regulatory-notification decision step to ransomware incident response.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Inaccessible data may be a reportable breach.
0:05K7 says no minimum size.
0:07Major obligations take effect May 2027.
0:12Ransomware can make personal data inaccessible, according to K7.
0:17Even with no theft, it may still be reportable.
0:20Individuals and the Board must be told without delay.
0:27No threat actor is attributed. Confidence: low.
0:32No malicious indicators were published.
0:384 ATT&CK techniques, from initial access to impact.
0:432 steps now: Add a regulatory-notification decision step to ransomware incident response.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.