NCSC, ICO on cyber myths

If I cover up the attack, everything will be ok. Reporting to the authorities makes it more likely your incident will go public. Paying a ransom makes the incident go away. I’ve got good offline backups, I won’t need to pay a ransom. If there is no evidence of data theft, you don’t need to report to the ICO. You’ll only get a fine if your data is leaked. These are six ‘myths’ which the UK’s National Cyber Security Centre (NCSC) and the data protection regulator the ICO have identified as commonly held by organisations that have fallen victim to cyber incidents.