Protection of personal data of an SME

Unable to access its information system, a company realises that it has suffered a ransomware attack. Malicious software that compromises both its business and the protection of its personal data.

Background

Without a viable backup, the company found itself in a critical situation. Indeed, the incident prevented it from continuing its activity and jeopardised the protection of the personal data in its possession.
Restoring the information system was therefore an absolute priority. Hence the immediate assignment of Stelliant, whose incident response service is available 24 hours a day, 7 days a week.

How Stelliant proceeded

From the beginning of the intervention, the expert from the Stelliant group focused on better understanding the incident from a technical point of view. This IT security specialist analysed the technical elements of the cyberattack. The malicious software that had compromised the insured’s information system was identified.
The cyber expert then put forward various hypotheses concerning the compromise vector, before implementing concrete actions to remedy the situation. In the absence of a viable backup, the priority was to retrieve the compromised information in order to reinject it into the system. Through the skills and network of partners specializing in this type of event, the Stelliant group was able to perform a laboratory analysis of the encrypted data, in order to recover them.

This assistance mission finally resulted in the recovery of the SME’s data. To prevent this type of incident from happening again, the Stelliant Group’s specialist expert recommended measures to secure the infrastructure.

The financial expert’s intervention proved decisive in studying the various items of the insured’s claims. These operations made it possible to distinguish between indemnifiable expenses and expenses incurred for the improvement of systems, such as computer equipment and data security. The insured was thus able to be compensated in accordance with the terms of the policy.

The Stelliant group is able to manage any type of cyber claim, by interacting with specialists in various fields: IT, personal data protection, communication, law… A crisis management skill, combined with a complete technical mastery, which makes Stelliant a privileged interlocutor for the insured and his insurer in these delicate situations.