← Back

Wire · regulatory

Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under ...

Published

12 November 2026

Topic

regulatory

◆ Sectors

Cybersecurity

◆ Geography

India

◆ Source

Read at cxotoday.com →

◆ Verified

Fusion42 · 12 November 2026 · Fusion42 review

India's Digital Personal Data Protection (DPDP) Act mandates breach reporting for ransomware attacks causing loss of access to personal data, even without data theft. Enterprises must comply with notification deadlines, update incident response and supplier contracts, and maintain comprehensive logging to meet the May 2027 compliance start.

This Wire brief sits within Fusion42's coverage of Cybersecurity.

◆ ◆ The Wire takeaway

Your ransomware response must now include breach reporting even if no data was stolen. Check your contracts and logging systems immediately to avoid penalties and missed notifications.

◆ Coverage

1 source · 12 Nov 2026

◆ Related on Wire

◆ Topics

Cybersecurityransomwaredata-breachcompliancedpdpincident-responselogging