Cybersecurity and ransomware attacks continue to dominate corporate security and data privacy agendas, especially for data stored in the cloud. New versions of ransomware specifically look for and copy personally identifiable information to the cyber-criminal's servers. This PII is then threatened to be released on the internet if the ransom is not paid putting the company at risk for privacy regulation non-compliance. This new ransomware also actively looks for backups and deletes them so the affected enterprise cannot be restored when the data-in-place is encrypted. Companies are in need of technology/processes to thwart these attacks. One possible defense is using encryption and immutable media to safeguard this sensitive data. Legal, IT and records people with basic understanding of records management and compliance should attend this presentation.