Comment Re:Pinkie-Swearman Key Exchange (Score 1) 83
I think it's in the hackers' best interests to be honest about this.
If they aren't, and release the data publicly or sell it, or release it in any form after promising to delete it, it tells the world that they can't be trusted, and future ransom demands with promises to delete the data won't be worth the electrons carrying said promises.
They've proved themselves clever enough to crack the security on a relatively secure and trusted platform. They will be looking for the next platform to crack as we speak. When the time comes to make their next demands, the hostages will know that either they can be trusted to delete the data, or not. Being trustworthy means a better chance to be paid $BIGNUM. If their reputation were tarnished, hostages would be less likely to pay, and will take the consequences of exposure of the users' data.
After all, those privacy and security guarantees made when students were required to create accounts, well, no-one is going to be held accountable when the next breach happens, are they? Perhaps some prison terms would be a useful incentive to the next board of management when making decisions on whose software to use.
All those terms and conditions where you have to click "OK" ? Funny how consequences are mostly one-sided - the user. I've never seen T&C where there's any consequences for the other side.