Detailed Incident Reports: What Everyone Wants, but Few are Willing to Share – Even Anonymously

Yesterday, Dragos disclosed that on May 8, 2023, a known cybercriminal group attempted and failed at an extortion scheme against them. The criminal group attempted to compromise Dragos’ employee onboarding process. It’s not remarkable that Dragos experienced a security incident, but how quickly it responded and publicly disclosed to the community what happened, described how they prevented it from being much worse, and, “hopefully, help de-stigmatize security events.”