HighRansomwareOct 8, 2026

Ransomware Recovery Firm Accused of Secretly Paying Cybercriminals

The US Department of Justice has charged the owner of a ransomware recovery company with defrauding victims of more than $19 million. The firm allegedly claimed to recover compromised data using proprietary tools while secretly paying attackers for decryption keys. This situation underscores the critical need for businesses to rely on proven incident response and backup strategies rather than unverified recovery vendors.

Ransomware security briefing

Who is affected

Organizations experiencing ransomware attacks that hire unverified third-party incident response or recovery providers are at risk.

How to mitigate it

  1. 1Maintain isolated, immutable backups and test restoration processes regularly so data recovery does not depend on attackers or third-party decryptors.
  2. 2Thoroughly vet incident response partners and verify their technical credentials before an incident occurs.
  3. 3Require transparency and written contractual proof regarding recovery methodologies and ransomware negotiation policies from any response vendor.
  4. 4Deploy multi-layered endpoint detection and identity protections to stop ransomware before it encrypts core systems.

How Outsource IT solves this

Maintaining verified, restorable backups and a clear continuity plan ensures your business can recover independently from ransomware without negotiating with criminals or risking fraudulent recovery services.

Business Data Backup, Disaster Recovery & Continuity

Tags

ransomwaredata recoveryfraudincident response

Source advisory: the-hacker-news

Not sure whether this affects your business?

Outsource IT has been delivering managed services for over 20 years from Burlington, Ontario, supporting organizations right across Canada. Ask our team to review your exposure.

More security briefings

View the full security feed

Testimonials

Don't just take our word for it.

  • We were introduced to Outsource IT at a time when we were interested in improving our IT infrastructure and associated services. In working with Outsource IT; they have rebuilt our confidence in third party IT administration. As CBM grows, we know we are in good hands as we focus on serving our clients.
    Canadian Business MachinesFull service designer and precision metal fabricator.
  • Over the past 8 years, we have received exceptional service from Outsource IT. Their attention to our needs has been prompt and thorough and we are pleased to have them as our ongoing IT service provider.
    Hamilton Family Health TeamOntario's largest Family Health Team with over 150 doctors
  • Outsource IT has brought critical thinking, support and value to our Organization. Their attention to detail and strategic approach leverages I.T. operations to meet today's industry standards. Being EXCEPTIONAL is exactly what Outsource IT has brought to CICC.
    CICCCollege of Immigration and Citizenship Consultants

Technology partners we build on

Certified expertise across the platforms that run Canadian business, from Microsoft and Cisco to Fortinet, Dell and HPE.

  • Microsoft technology partner logo
  • Cisco technology partner logo
  • Fortinet technology partner logo
  • Barracuda technology partner logo
  • Dell Technologies technology partner logo
  • HP technology partner logo
  • Hewlett Packard Enterprise technology partner logo
  • Lenovo technology partner logo
  • VMware technology partner logo
  • Google technology partner logo
  • Eaton technology partner logo
  • 3CX technology partner logo