Your Company’s Data Is for Sale on the Dark Web. Should You Buy It Back? (2024)

Your Company’s Data Is for Sale on the Dark Web. Should You Buy It Back? (1)

Paying for stolen data — even when it’s your own — comes with substantial legal and reputational risks.

January 04, 2023

Summary.

In the course of routine monitoring, you may come across proprietary company information on the dark web. So should you try to buy it back?The short answer is that in most cases, the legal and reputational risks far outweigh the benefits of purchasing the information. Here’s a closer look at eight of those risks.

One day I got a call from Sarah*, the in-house counsel at a large financial institution. “Our [information security] team was doing a routine search and found a list of our employee passwords for sale on the dark web,” she told me. “The business folks want to buy it back. What should we do? Should we buy it ourselves? Are there any downsides?”

New!

Your Company’s Data Is for Sale on the Dark Web. Should You Buy It Back? (3)

HBR Learning

Your Company’s Data Is for Sale on the Dark Web. Should You Buy It Back? (4)

Ethics at Work Course

Accelerate your career with Harvard ManageMentor®. HBR Learning’s online leadership training helps you hone your skills with courses like Ethics at Work. Earn badges to share on LinkedIn and your resume. Access more than 40 courses trusted by Fortune 500 companies.

Avoid integrity traps in the workplace.

Start Course

Learn More & See All Courses

  • Brenda R. Sharton is a litigation partner and global Chair of Dechert LLP’s top-ranked, Privacy & Cybersecurity practice. She is an internationally recognized expert, pioneer and thought leader in the space. Ms. Sharton is Chambers ranked and a Legal 500 “Leading Lawyer” in Cyber Law/Breach response. In 2022, Ms. Sharton received Law360’s MVP award in Cybersecurity and Privacy. She has quarterbacked over 1,000 data breach investigations of all types and negotiated ransom for some the highest profile cyberattacks brought by threat actors ranging from nation states to organized crime to insiders. A first chair trial lawyer, Ms. Sharton has litigated landmark privacy litigation and regulatory enforcement matters brought by regulators across the globe.

New!

Your Company’s Data Is for Sale on the Dark Web. Should You Buy It Back? (5)HBR Learning

Ethics at Work Course

Accelerate your career with Harvard ManageMentor®. HBR Learning’s online leadership training helps you hone your skills with courses like Ethics at Work. Earn badges to share on LinkedIn and your resume. Access more than 40 courses trusted by Fortune 500 companies.

Avoid integrity traps in the workplace.

Your Company’s Data Is for Sale on the Dark Web. Should You Buy It Back? (6)

Your Company’s Data Is for Sale on the Dark Web. Should You Buy It Back? (2024)
Top Articles
Latest Posts
Article information

Author: Edwin Metz

Last Updated:

Views: 5639

Rating: 4.8 / 5 (78 voted)

Reviews: 85% of readers found this page helpful

Author information

Name: Edwin Metz

Birthday: 1997-04-16

Address: 51593 Leanne Light, Kuphalmouth, DE 50012-5183

Phone: +639107620957

Job: Corporate Banking Technician

Hobby: Reading, scrapbook, role-playing games, Fishing, Fishing, Scuba diving, Beekeeping

Introduction: My name is Edwin Metz, I am a fair, energetic, helpful, brave, outstanding, nice, helpful person who loves writing and wants to share my knowledge and understanding with you.