This paper examines how cybercriminals could use stolen data published on dark websites to coerce companies for ransoms and facilitate other attacks, making it essential for companies to determine what data has been compromised and disclose it accordingly to customers and regulators.
