Wire · regulatory
Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under ...
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 12 November 2026 · Fusion42 review
India's Digital Personal Data Protection (DPDP) Act mandates breach reporting for ransomware attacks causing loss of access to personal data, even without data theft. Enterprises must comply with notification deadlines, update incident response and supplier contracts, and maintain comprehensive logging to meet the May 2027 compliance start.
This Wire brief sits within Fusion42's coverage of Cybersecurity.
◆ ◆ The Wire takeaway
Your ransomware response must now include breach reporting even if no data was stolen. Check your contracts and logging systems immediately to avoid penalties and missed notifications.
◆ Coverage
1 source · 12 Nov 2026
◆ Related on Wire
◆ Topics