{"id":9409,"date":"2026-10-28T12:20:12","date_gmt":"2026-10-28T11:20:12","guid":{"rendered":"https:\/\/atb.law\/?p=9409"},"modified":"2026-10-28T12:40:36","modified_gmt":"2026-10-28T11:40:36","slug":"ransomware-ransom-negotiation-a1-security-day-2026","status":"publish","type":"post","link":"https:\/\/atb.law\/en\/ransomware-loesegeldverhandlung-a1-security-day-2026\/","title":{"rendered":"Ransomware and ransom negotiations: ATB.LAW at the A1 Security Day 2026"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

Ransomware attacks are among the biggest risks for companies.<\/strong> After an attack, technical, legal, and economic decisions must be made within a few hours. At the A1 Security Day 2026, Mag. Roman Taudes, LL.M., and Mag. Anela Bl\u00f6ch from ATB.LAW showed how companies can handle this situation.<\/p>\n\n

The A1 Security Day took place on October 15, 2026, at the A1 headquarters in Vienna. Around 300 entrepreneurs, CISOs, and IT security professionals participated. The main theme was \u201eThe AI threat: Cyber security in the age of superintelligence\u201c.

<\/p>\n\n

Keynote: \u201eWhen AI strikes \u2013 Extortion cases in practice\u201c<\/h3>\n\n


ATB.LAW has been assisting companies following hacker attacks and extortion for years. The keynote focused on the experiences gained from this practice.<\/p>\n\n

Artificial intelligence is fundamentally changing cyber extortion.<\/strong> Phishing messages are becoming flawless and personalized. Voice and video messages can be deceptively made to appear real. Attacks are increasingly being carried out automatically. This makes smaller and medium-sized companies more vulnerable.<\/p>\n\n


Panel: \u201eNegotiations with Hackers \u2013 Numbers or Defending?\u201c

<\/h3>\n\n

The panel discussed one of the most difficult questions following a ransomware attack: Should a company negotiate with the attackers and, if necessary, pay them?<\/p>\n\n

There is no one-size-fits-all answer.<\/strong> The decision depends on the individual case. In particular, the following factors are decisive:<\/p>\n

-> the availability of intact backups
-> <\/span>Nature and extent of data that is being collected
<\/span>-> sanctions and money laundering regulations
<\/span>-> Requirements of the cyber insurance
<\/span>-> the duty of care of the management<\/span><\/p>\n\n


A professional ransom negotiation can also be useful even if no payment is made in the end.<\/strong> It saves time, provides information about perpetrators and data flows, and can significantly reduce the claim. ATB.LAW conducts such negotiations and, if necessary, also oversees the payment settlement.<\/p>\n\n

Incident Response: The first hours decide<\/h3>\n\n

After a hacker attack, structured action is crucial. The following steps have proven to be effective:

-> isolate affected systems and secure evidence
<\/span>-> Crisis team convened with IT forensics and legal advice
<\/span>-> Review reporting obligations under GDPR and NISG 2026
<\/span>-> Charge withdrawn
<\/span>-> Coordinate communication internally and externally<\/span><\/p>\n\n


NIS-2: New obligations from October 1, 2026<\/h3>\n\n

From October 1, 2026, the NISG 2026 applies in Austria.<\/strong> It implements the European NIS-2 directive. Affected companies must implement risk management measures and report significant security incidents to the authority within staggered deadlines. The management bodies bear explicit responsibility. A ransomware attack is often a mandatory reportable incident.<\/p>\n\n


Data protection: Report within 72 hours<\/h3>\n\n

If personal data is affected, a data protection violation is usually involved.<\/strong> This must be reported to the data protection authority within 72 hours in principle (Article 33 GDPR). In cases of high risk, the affected individuals must also be informed (Article 34 GDPR). The reporting obligations under the GDPR and NISG 2026 exist in parallel and should be coordinated with each other.<\/p>\n\n


Our services in the event of hacker attacks<\/h3>\n\n

ATB.LAW comprehensively supports companies before, during, and after a cyberattack:

-> Incident Response and Crisis Management
<\/span>-> Negotiating ransom with the perpetrators
<\/span>-> Reports to the data protection authority and the cybersecurity authority
<\/span>-> Criminal charges and representation in criminal proceedings
<\/span>-> Liability and insurance issues
<\/span>-> Tracking of crypto payments in collaboration with forensic partners
<\/span>-> Prevention, emergency plans and NIS-2 compliance<\/span><\/p>\n\n


Frequently asked questions<\/h3>\n\n

What is a ransomware attack?<\/strong>
In a ransomware attack, attackers encrypt data or systems and demand ransom, usually in cryptocurrency. They often also threaten to publish stolen data.<\/p>\n\n

Is the payment of ransom money allowed in Austria?<\/strong>
As things currently stand, there is no general ban. However, payments to sanctioned individuals or groups are particularly not permitted. Each case requires a separate examination.<\/p>\n\n

Must a ransomware attack be reported?<\/strong>
Often yes. If personal data is involved, the GDPR\u2019s 72-hour deadline applies. There are additional reporting obligations for facilities within the scope of the NISG 2026.<\/p>\n\n

Who helps with ransom negotiations in Austria?<\/strong>
ATB.LAW in Vienna conducts negotiations with extortionists and advises on all legal issues following a hacker attack.<\/p>\n\n


Contact<\/h3>\n\n

Is your company affected by a hacker attack? Or do you want to prepare for the worst? Contact us at office@atb.law<\/a> or +43 1 39 12345.<\/p>\n\n

\u00a0<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Ransomware-Angriffe z\u00e4hlen zu den gr\u00f6\u00dften Risiken f\u00fcr Unternehmen. Nach einem Angriff sind innerhalb weniger Stunden technische, rechtliche und wirtschaftliche Entscheidungen zu treffen. Beim A1 Security Day 2026 haben Mag. Roman Taudes, LL.M., und Mag. Anela Bl\u00f6ch von ATB.LAW gezeigt, wie Unternehmen diese Situation bew\u00e4ltigen k\u00f6nnen. Der A1 Security Day fand am 15. Oktober 2026 im […]<\/p>\n","protected":false},"author":3,"featured_media":9410,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9409","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-alle"],"acf":[],"post-kategorie":null,"_post-kategorie":null,"post-kurzbeschreibung":null,"_post-kurzbeschreibung":null,"post-beitragsbild":null,"_post-beitragsbild":null,"post-author_post-author-name":null,"_post-author_post-author-name":null,"post-author_post-author-foto":null,"_post-author_post-author-foto":null,"post-author":null,"_post-author":null,"yoast_head":"\nRansomware & L\u00f6segeldverhandlung: ATB.LAW am A1 Security Day 2026<\/title>\n<meta name=\"description\" content=\"ATB.LAW beim A1 Security Day 2026: Keynote und Panel zu Ransomware, L\u00f6segeldverhandlungen, NIS-2, Incident Response und Datenschutz bei Hackerangriffen.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atb.law\/en\/ransomware-ransom-negotiation-a1-security-day-2026\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware & L\u00f6segeldverhandlung: ATB.LAW am A1 Security Day 2026\" \/>\n<meta property=\"og:description\" content=\"ATB.LAW beim A1 Security Day 2026: Keynote und Panel zu Ransomware, L\u00f6segeldverhandlungen, NIS-2, Incident Response und Datenschutz bei Hackerangriffen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/atb.law\/en\/ransomware-ransom-negotiation-a1-security-day-2026\/\" \/>\n<meta property=\"og:site_name\" content=\"ATB.LAW\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-28T11:20:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-28T11:40:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/atb.law\/wp-content\/uploads\/2026\/10\/A1-Key-Note.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1066\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Roman Taudes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Roman Taudes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/\"},\"author\":{\"name\":\"Roman Taudes\",\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/person\\\/0f07de780e5128505763ad727bb29723\"},\"headline\":\"Ransomware und L\u00f6segeldverhandlungen: ATB.LAW beim A1 Security Day 2026\",\"datePublished\":\"2026-10-28T11:20:12+00:00\",\"dateModified\":\"2026-10-28T11:40:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/\"},\"wordCount\":662,\"publisher\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/A1-Key-Note.jpg\",\"articleSection\":[\"Alle\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/\",\"url\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/\",\"name\":\"Ransomware & L\u00f6segeldverhandlung: ATB.LAW am A1 Security Day 2026\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/A1-Key-Note.jpg\",\"datePublished\":\"2026-10-28T11:20:12+00:00\",\"dateModified\":\"2026-10-28T11:40:36+00:00\",\"description\":\"ATB.LAW beim A1 Security Day 2026: Keynote und Panel zu Ransomware, L\u00f6segeldverhandlungen, NIS-2, Incident Response und Datenschutz bei Hackerangriffen.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/#primaryimage\",\"url\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/A1-Key-Note.jpg\",\"contentUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/A1-Key-Note.jpg\",\"width\":1600,\"height\":1066},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/atb.law\\\/ransomware-loesegeldverhandlung-a1-security-day-2026\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/atb.law\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ransomware und L\u00f6segeldverhandlungen: ATB.LAW beim A1 Security Day 2026\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/atb.law\\\/#website\",\"url\":\"https:\\\/\\\/atb.law\\\/\",\"name\":\"atb Rechtsanw\u00e4lte\",\"description\":\"Rechtsanwaltskanzlei in Wien\",\"publisher\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/atb.law\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/atb.law\\\/#organization\",\"name\":\"atb Rechtsanw\u00e4lte\",\"url\":\"https:\\\/\\\/atb.law\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/ATB_Rechtsanwaelte_site-logo-beige.png\",\"contentUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/ATB_Rechtsanwaelte_site-logo-beige.png\",\"width\":1572,\"height\":1110,\"caption\":\"atb Rechtsanw\u00e4lte\"},\"image\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/person\\\/0f07de780e5128505763ad727bb29723\",\"name\":\"Roman Taudes\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ransomware & Ransomware Negotiation: ATB.LAW at the A1 Security Day 2026","description":"ATB.LAW at the A1 Security Day 2026: Keynote and panel on ransomware, ransom negotiations, NIS-2, incident response, and data protection in the event of hacker attacks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atb.law\/en\/ransomware-ransom-negotiation-a1-security-day-2026\/","og_locale":"en_US","og_type":"article","og_title":"Ransomware & L\u00f6segeldverhandlung: ATB.LAW am A1 Security Day 2026","og_description":"ATB.LAW beim A1 Security Day 2026: Keynote und Panel zu Ransomware, L\u00f6segeldverhandlungen, NIS-2, Incident Response und Datenschutz bei Hackerangriffen.","og_url":"https:\/\/atb.law\/en\/ransomware-ransom-negotiation-a1-security-day-2026\/","og_site_name":"ATB.LAW","article_published_time":"2026-10-28T11:20:12+00:00","article_modified_time":"2026-10-28T11:40:36+00:00","og_image":[{"width":1600,"height":1066,"url":"https:\/\/atb.law\/wp-content\/uploads\/2026\/10\/A1-Key-Note.jpg","type":"image\/jpeg"}],"author":"Roman Taudes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Roman Taudes","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/#article","isPartOf":{"@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/"},"author":{"name":"Roman Taudes","@id":"https:\/\/atb.law\/#\/schema\/person\/0f07de780e5128505763ad727bb29723"},"headline":"Ransomware und L\u00f6segeldverhandlungen: ATB.LAW beim A1 Security Day 2026","datePublished":"2026-10-28T11:20:12+00:00","dateModified":"2026-10-28T11:40:36+00:00","mainEntityOfPage":{"@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/"},"wordCount":662,"publisher":{"@id":"https:\/\/atb.law\/#organization"},"image":{"@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/atb.law\/wp-content\/uploads\/2026\/10\/A1-Key-Note.jpg","articleSection":["Alle"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/","url":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/","name":"Ransomware & Ransomware Negotiation: ATB.LAW at the A1 Security Day 2026","isPartOf":{"@id":"https:\/\/atb.law\/#website"},"primaryImageOfPage":{"@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/#primaryimage"},"image":{"@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/atb.law\/wp-content\/uploads\/2026\/10\/A1-Key-Note.jpg","datePublished":"2026-10-28T11:20:12+00:00","dateModified":"2026-10-28T11:40:36+00:00","description":"ATB.LAW at the A1 Security Day 2026: Keynote and panel on ransomware, ransom negotiations, NIS-2, incident response, and data protection in the event of hacker attacks.","breadcrumb":{"@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/#primaryimage","url":"https:\/\/atb.law\/wp-content\/uploads\/2026\/10\/A1-Key-Note.jpg","contentUrl":"https:\/\/atb.law\/wp-content\/uploads\/2026\/10\/A1-Key-Note.jpg","width":1600,"height":1066},{"@type":"BreadcrumbList","@id":"https:\/\/atb.law\/ransomware-loesegeldverhandlung-a1-security-day-2026\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atb.law\/"},{"@type":"ListItem","position":2,"name":"Ransomware und L\u00f6segeldverhandlungen: ATB.LAW beim A1 Security Day 2026"}]},{"@type":"WebSite","@id":"https:\/\/atb.law\/#website","url":"https:\/\/atb.law\/","name":"atb Attorneys at Law","description":"Law firm in Vienna","publisher":{"@id":"https:\/\/atb.law\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atb.law\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atb.law\/#organization","name":"atb Attorneys at Law","url":"https:\/\/atb.law\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atb.law\/#\/schema\/logo\/image\/","url":"https:\/\/atb.law\/wp-content\/uploads\/2024\/05\/ATB_Rechtsanwaelte_site-logo-beige.png","contentUrl":"https:\/\/atb.law\/wp-content\/uploads\/2024\/05\/ATB_Rechtsanwaelte_site-logo-beige.png","width":1572,"height":1110,"caption":"atb Rechtsanw\u00e4lte"},"image":{"@id":"https:\/\/atb.law\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/atb.law\/#\/schema\/person\/0f07de780e5128505763ad727bb29723","name":"Roman Taudes"}]}},"_links":{"self":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/posts\/9409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/comments?post=9409"}],"version-history":[{"count":21,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/posts\/9409\/revisions"}],"predecessor-version":[{"id":9436,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/posts\/9409\/revisions\/9436"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/media\/9410"}],"wp:attachment":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/media?parent=9409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/categories?post=9409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/tags?post=9409"}],"curies":[{"name":"Well played","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}