Eric Geller @ericgeller
Also, any company that pays a ransom, except for a small business, would also have to submit a report to CISA about the underlying attack, the ransom amount & currency type, & other details. CISA chooses reporting timeframe, but would have to be b/w 24 & 72 hours after payment. — PolitiTweet.org
