When Ransomware Hits, Are Board Members Personally Liable? Some Find Out the Hard Way.

Board members are increasingly held personally liable for inadequate ransomware oversight, with legal standards shifting from merely having security tools to demonstrating active, documented engagement with the specific ransomware risk to their organisation. This regulatory tightening is exemplified by recent Delaware case law, SEC enforcement actions, and strict European fines under DORA, raising the stakes for directors' fiduciary duties and corporate governance processes.

This Wire brief sits within Fusion42's coverage of Enterprise Software.