Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity
CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers never steal a single file. According to a media background briefing released by K7 CyberSecurity on November 12, 2026, India’s Digital Personal Data Protection (DPDP) Act defines a personal data breach...
Why it ranks 17 (Routine)
- Reporting
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- DataBreaches.net (databreaches.net)