ChipSoft says ransomware data deleted, but experts seek proof

ChipSoft has provided an update on its ransomware incident, and DigitalShield reports that the company has not disclosed whether it paid the attackers’ ransom, while noting that some negotiations took place. According to DigitalShield, one of the most striking elements of the case is the company’s claim about the deletion of the stolen data, described as a destruction that has been verified in a way ChipSoft regards as technically correct, though the procedure used has not been detailed.

The article emphasises that such confirmation is not common in ransomware incidents, since organisations cannot always guarantee data has been deleted even after a payment. It also notes that patient data was exfiltrated in this incident, and questions remain about how ChipSoft can be sure that any stolen data has been deleted. The piece calls for more transparency around this claim, highlighting doubts raised by cybersecurity experts.