Swift Quoted in Legaltech News About Impact of U.S. Treasury Department Sanctions in Ransomware Payments
07 August 2020
Partner Christopher Swift was quoted in the Legaltech News article, “Treasury Department Potentially Making Ransomware Payments More Complicated — and Costly,” which discussed how companies impacted by ransomware also need to think about U.S.Treasury Department sanctions when deciding whether to pay ransomware. The Office of Foreign Assets Control, a financial intelligence and enforcement agency within the U.S. Treasury Department, maintains a Specially Designated Nationals and Blocked Persons List of groups or individuals that U.S. persons are “generally prohibited from dealing with,” which includes the payment of cryptocurrency ransoms. While OFAC has yet to levy penalties against businesses who pay ransom to an SDN list entity, companies in the midst of a cyber crisis may still have to proceed carefully.
Swift noted that a business could very quickly see its financial exposure rise beyond a hypothetical million-dollar ransom. “Not only have you paid a million dollars to a criminal group … the penalties when the Treasury Department finds out about it and comes after you are going to be anywhere from $300,000 to $2 million on top of the ransom you just paid, plus the cost of attorneys’ fees,” he said.
But the calculus that a company faces when deciding whether to pay a cryptocurrency ransom to an actor on the SDN list also extends beyond the financial considerations involved. Like many other types of cyber incidents, Swift pointed out that there’s a reputational element that a business has to consider when being publicly seen as doing business with a criminal or potentially even a terrorist organization.
Some businesses may also find unexpected value in consulting with their information technology departments about the full extent of their backups, which Swift thinks can often extend further than a business’ leadership knows. “IT departments tend to save a lot of data. Their sort of culture and outlook is built around saving and sustaining data. They save stuff they don’t need to save,” Swift said.
Swift noted that a business could very quickly see its financial exposure rise beyond a hypothetical million-dollar ransom. “Not only have you paid a million dollars to a criminal group … the penalties when the Treasury Department finds out about it and comes after you are going to be anywhere from $300,000 to $2 million on top of the ransom you just paid, plus the cost of attorneys’ fees,” he said.
But the calculus that a company faces when deciding whether to pay a cryptocurrency ransom to an actor on the SDN list also extends beyond the financial considerations involved. Like many other types of cyber incidents, Swift pointed out that there’s a reputational element that a business has to consider when being publicly seen as doing business with a criminal or potentially even a terrorist organization.
Some businesses may also find unexpected value in consulting with their information technology departments about the full extent of their backups, which Swift thinks can often extend further than a business’ leadership knows. “IT departments tend to save a lot of data. Their sort of culture and outlook is built around saving and sustaining data. They save stuff they don’t need to save,” Swift said.
People
Related News
25 July 2024
In the News
Donald Schroeder on Groff – ‘Supreme Court decision is inviting a more fact-based analysis’
Foley & Lardner LLP partner Donald Schroeder assessed the impact of the U.S. Supreme Court’s 2023 decision in a religious accommodation case as it returns to the district court in the Law360 article, “A Year After High Court Spotlight, Groff Case Still A Bellwether.”
24 July 2024
In the News
Louis Lehot Featured in Q&A on How Startups Can Prepare for IPO
Foley & Lardner LLP partner Louis Lehot features in the Q&A, "How startups can get in top shape for an IPO, according to Silicon Valley lawyer Louis Lehot," part of Business Insider's Road to IPO' series.
24 July 2024
In the News
Courtenay Brinckerhoff on Patent Cap in Drug Pricing – ‘Hard to predict if this will make a difference’
Foley & Lardner LLP partner Courtenay Brinckerhoff discussed a recent bill passed in the U.S. Senate aimed at lowering drug prices by limiting the number of patents that can be asserted in cases over biosimilars in the Law360 article, “Patent Cap In Drug Pricing Bill Seen As Having Muted Effect.”