You work for a U.S.-based utility company that suffers a data breach. Several hacktivist groups claim responsibility for the attack. However, there is no evidence to verify their claims. What is the most ethical way to respond to this incident?

 

You work for a U.S.-based utility company that suffers a data breach. Several hacktivist groups claim responsibility for the attack. However, there is no evidence to verify their claims. What is the most ethical way to respond to this incident?

 

• Escalate the situation by involving other organizations that have been targeted.
• Improve the company’s defenses to help prevent future attacks.
• Target a specific hacktivist group as a warning to the others.
• Conduct cyberattacks against each hacktivist group that claimed responsibility.