I do ransomware response for really critical infrastructure - like electric power, water, transit systems, manufacturing, oil for a living. I have to be mostly be emotionally detached, even when lives are at risk - that's triage.

Sometimes, when nobody gets hurt I even raise an eyebrow or raise a glass at a new tactic. But let's make one thing clear:

If you ransom a children's cancer hospital, you are irredeemable scum. You know exactly what you're doing, and you chose to potentially delay or disrupt treatment for suffering little kids.

https://therecord.media/lurie-childrens-hospital-chicago-ransomware-rhysida?&web_view=true

Ransomware gang seeks $3.4 million after attacking children’s hospital

Lurie Children's Hospital in Chicago had announced a cybersecurity incident earlier this month. The attackers have claimed intrusions into more than a dozen other hospitals' networks.

@hacks4pancakes Agreed. I'm more on the Protect part of the framework rather than Respond, but it's still jarring every time you realise that "expect people to have SOME form of moral compass, no matter how atrophied" isn't any type of reliable control. Some people are just broken.