Mandating cyber insurance coverage could help as well and help align financial interests with cybersecurity ones

Hospitals and Healthcare related companies (e.g. Insurance) at least are required by HIPAA to meet certain security standards. Whether they actually do or not, well who's gonna know if we are just really careful about hiding the stickynote with the password on it.

City Manager Marnie Cluckie added that the city can’t access the data, since it’s encrypted, but that they have a backup in place.

“All evidence at this point and based on what our cyber experts are telling us is that while it's encrypted it hasn't been removed from the organization, it hasn't been taken and therefore it hasn’t been compromised,” Cluckie said.

When it comes to getting services back online, she said fire and paramedic services, along with anything safety-related, are priorities. Meanwhile, the city is still working to contain the breach and rebuild its IT system.

“It’s not over yet,” Horwath said, noting the long path to restoration still ahead. “Those bad guys are still out there.”