Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity

CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers never steal a single file. According to a media background briefing released by K7 CyberSecurity on November 12, 2026, India’s Digital Personal Data Protection (DPDP) Act defines a personal data breach…
This article has been indexed from DataBreaches.Net

Read the original article:

Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity