Cybersecurity · Cybersecurity · Hard · 35-45 min

Fintech Hit by Ransomware

Last updated 2026-07-29

What is this case about?

A fintech with 2M customers has been hit by ransomware. Core systems are encrypted, the attacker demands $5M in crypto, and customer-facing services are down. The CEO wants an immediate response plan and, once stable, a longer-term security roadmap so this never happens again. Regulators and customers will need to be informed.

Where strong candidates start

  • Triage now — contain/isolate, assess scope, stand up incident command, preserve evidence
  • Work the pay-vs-don't-pay decision — backup viability, legal/regulatory constraints, no guarantee of decryption

More cases