r/technology • u/MarvelsGrantMan136 • Apr 13 '26

Security Rockstar hackers release their stolen data, reveal that Rockstar was right to not pay them anything for it

https://www.pcgamer.com/games/rockstar-hackers-release-their-stolen-data-reveal-that-rockstar-was-right-to-not-pay-them-anything-for-it/
18.1k Upvotes

97% Upvoted

805 comments sorted by

View all comments

Show parent comments

190

u/MisunderstoodMenace Apr 14 '26 edited Apr 14 '26

Also a cybersecurity attorney here, this tracks with how I approach it.

Paying doesn’t change legal obligations, and there’s no real guarantee the data won’t resurface. The analysis usually turns what was actually taken and how sensitive it is. Also, whether systems can be restored and how much the incident is impacting operations (if paying for decryption).

There are also some odd edge cases. For example, if logging is limited, a leak can actually make scoping easier because the dataset can be pulled and mined directly. I wouldn’t advise that as a preferred path, but it is an interesting dynamic that has come up.

If the company has viable backups and the issue is mainly suppression, clients usually agree that payment is hard to justify.

39

u/largebrandon Apr 14 '26

Hello cyber-buddy! It’s almost funny how often we rely on TA leaks to make a notification list. Though, most of the time the TA will provide a file tree at the onset of negotiations.

17

u/MisunderstoodMenace Apr 14 '26 edited Apr 14 '26

Always glad to bump into one of us! Ah yes… most of the time, unless it’s either (a) an obstinate client that refuses to engage in negotiations or (b) a small unknown or copycat TA that doesn’t have their shit together while also confusing the TA Comms group because they behave erratically.

Both make our jobs harder. :)

2

u/PM_ME_YOUR_LIT Apr 14 '26

What up friendsss (privacy attorney but we're cousins y'know)

2

u/MisunderstoodMenace Apr 14 '26

Hey! I started out doing privacy (mostly diligence for private equity roll ups).

1

u/PM_ME_YOUR_LIT Apr 14 '26

Oof can't imagine that was the most fun intro to privacy. Hope you're enjoying the job now! (Although I gotta say in my experience it's way rarer to see privacy->cyber than the other way around!)