Data breach ransomware demands and establishing the truth - Talion

Problem Area

Maintaining control of your own security when another part of your business or part of your supply chain has been attacked.

The Challenge

When part of your organisation or supply has been attacked how do you determine the risk to your business or in the event of receiving a ransomware notification, how do you determine the truth and associated risks without pressing the panic button too soon.

How We Helped

Our customer reached out to us with a request to determine whether they had been attacked, and whether the ransomware demand they had received was legitimate. Using our Incident Response services, we initiated a search of the data that the ransom group had provided, so that we could establish how much of what the client was being told was true, and the associated risk.


The search discovered that whilst there were files referencing the client, the data was not directly from their servers, but in fact from an associated company dating to 2017 and earlier. We also confirmed that there was nothing of value or concern within the data. The relationship with the associated company had ended in 2017.
We enabled our customer to make an informed decision regarding the payment of the ransom based on what we had identified. The ransom was not paid.

Watch demo video
We’re a tight-knit, highly skilled operation, so when a threat arises, we move quickly.
Watch demo video
We’re a tight-knit, highly skilled operation, so when a threat arises, we move quickly.
24x7x365 UK-based Security Operations Centre
Service underpinned by market leading threat intelligence team
Continually developed threat relevant content, backed by SLAs
MDR service has featured in the Gartner Magic Quadrant for 6 consecutive years
Experts in SIEM and SOAR technology
UK-based Senior Leadership
Looking to maximise value and flexibility?
Learn how Talion and DEVO partner to achieve this.
Discuss your cyber security needs
Contact us below and one of our team will be in touch to answer your questions.

Call us on 0800 048 5775

Call us directly and we’ll put you in touch with the most relevant cyber expert.

Get In Touch With Us

Not currently free to call? Give us a brief description of what you’re looking for by filling out our form and we’ll email you as soon as we can.

CISO Cyber Dinner – Register Your Interest!

Thought-provoking cyber security discussion at Michelin-star restaurants across the UK.