---
title: US Treasury Department Warns Companies Paying Cyber Ransom Could Violate OFAC Rules
description: "“Out of 3,000 customers and in our small subset of the industry we have almost a dozen cyber ransoms in excess of $1M with demands as high as $10M.\""
image: https://blog.plrisk.com/hubfs/pexels-karolina-grabowska-4386155.jpg
---

[![2012 PLRisk Logo-Feb-28-2023-09-30-45-0928-PM](https://blog.plrisk.com/hs-fs/hubfs/2012%20PLRisk%20Logo-Feb-28-2023-09-30-45-0928-PM.png?width=1650&height=500&name=2012%20PLRisk%20Logo-Feb-28-2023-09-30-45-0928-PM.png "2012 PLRisk Logo-Feb-28-2023-09-30-45-0928-PM")](https://plrisk.com/)

[![PL Risk](https://blog.plrisk.com/hs-fs/hubfs/raw_assets/public/Pl_Risk_June_2020/images/plrisk-50x140-logo.png?width=300&height=300&name=plrisk-50x140-logo.png "PL Risk")](https://plrisk.com/)

- [HOME](https://plrisk.com/)
- [CUSTOMER CENTER](https://plrisk.com/#) 
    - [Make A Payment](https://plrisk.epaypolicy.com/)
    - [Submit An Application](https://www.plrisk.com/applications/)
    - [Confirmation of Coverage](mailto:info@plrisk.com)
    - [Download Applications](https://plrisk.com/applications)
    - [File a Claim](https://plrisk.com/file-a-claim)
    - [Claim Scenarios](https://plrisk.com/claim-scenarios)
    - [FAQs](https://plrisk.com/faqs)
    - [Industry Tools](https://plrisk.com/industry-tools)
    - [Free Cyber Hotline](https://plrisk.com/free-cyber-hotline)
    - [Get Appointed](https://plrisk.com/for-agents)
- [INDUSTRIES WE SERVE](https://plrisk.com/#) 
    - [Architects & Engineers](https://plrisk.com/architects-engineers/)
    - [Financial Institutions](https://plrisk.com/financial-institutions/)
    - [Healthcare / Medical](https://plrisk.com/healthcare-medical/)
    - [Insurance](https://plrisk.com/insurance/)
    - [Technology](https://plrisk.com/technology/)
    - [Consulting](https://plrisk.com/consulting/)
    - [Legal](https://plrisk.com/legal)
    - [Real Estate](https://plrisk.com/real-estate/)
    - [Media](https://plrisk.com/media)
    - [Miscellaneous Services](https://plrisk.com/miscellaneous-services/)
- [PRODUCTS](https://plrisk.com/#) 
    - [Overview](https://plrisk.com/products)
    - [Errors and Omissions](https://plrisk.com/products/errors-omissions)
    - [Directors and Officers](https://plrisk.com/products/directors-officers/)
    - [Commercial Crime](https://plrisk.com/products/commercial-crime/)
    - [Employment Practices](https://plrisk.com/products/employment-practices/)
    - [Cybersecurity](https://plrisk.com/products/fiduciary/)
    - [Fiduciary](https://plrisk.com/products/cybersecurity/)
- MERGERS & ACQUISITIONS 
    - [Reps and Warranties Sell](https://www.plrisk.com/wp-content/uploads/2023/06/PLR-Reps-and-Warranties-SellSide-Onesheet.pdf)
    - [Reps and Warranties](https://www.plrisk.com/wp-content/uploads/2023/06/PLR-Reps-and-Warranties-Onesheet.pdf)
- CANNABIS 
    - [Overview](https://www.plrisk.com/products/cannabis-insurance)
    - [Account Highlights](https://blog.plrisk.com/hubfs/PLR%20-%20Cannabis%20Assets/PLR-CANNABIS-account%20highlights_Onesheet-V2.pdf)
    - [Commercial Property](https://www.plrisk.com/cannabis-commercial-property/)
    - [Commercial Crime](https://www.plrisk.com/cannabis-business-insurance-commercial-crime)
    - [Cyber Liability](https://www.plrisk.com/wp-content/uploads/2023/08/PLR-12-CANNABIS-Cyber-Insurance-Onesheet-V8.pdf)
    - [D&O](https://blog.plrisk.com/hubfs/PLR%20-%20Cannabis%20Assets/PLR-CANNABIS-D%26O-Onesheet-V1.pdf)
    - [E&O](https://blog.plrisk.com/hubfs/PLR%20-%20Cannabis%20Assets/PLR-CANNABIS-E%26O-Onesheet-V1.pdf)
    - [EPLI](https://www.plrisk.com/wp-content/uploads/2023/08/PLR-10-CANNABIS-Employment-Practices-Liability-Onesheet-V9.pdf)
    - [General Liability](https://www.plrisk.com/wp-content/uploads/2023/08/PLR-02-CANNABIS-General-Liability-Onesheet-V4-1.pdf)
    - [Product Liability](https://www.plrisk.com/wp-content/uploads/2023/08/PLR-03-CANNABIS-Product-Liability-Onesheet-V2-4.pdf)
    - [Workers’ Comp](https://www.plrisk.com/wp-content/uploads/2023/08/PLR-05-CANNABIS-Workers-Compensation-Onesheet-Reduced.pdf)
- [SELECT](https://www.plrisk.com/products/select-division/)
- [ABOUT](https://plrisk.com/#) 
    - [Our Team](https://plrisk.com/our-team/)
    - [Careers](https://www.plrisk.com/careers/)
    - [Our Charity](https://plrisk.com/helping-hands/)
- NEWSROOM 
    - [Blog](https://blog.plrisk.com)
    - [Newsletters](https://www.plrisk.com/plr-newsletters/)
- QUOTE ONLINE 
    - [Hiscox NOW Small Business Insurance](https://www.hiscox.com/partner-agent/plriskadvisors)
    - [Custom Quote](https://www.hiscox.com/partner-agent/plriskadvisors)

- CUSTOMER  
  CENTER
  
  
  
    - [MAKE A PAYMENT](https://plrisk.epaypolicy.com/)
    - [SUBMIT AN APPLICATION](https://www.plrisk.com/applications/)
    - [CONFIRMATION OF COVERAGE](mailto:info@plrisk.com)
    - [DOWNLOAD APPLICATIONS](https://plrisk.com/applications)
    - [FILE A CLAIM](https://plrisk.com/file-a-claim)
    - [CLAIM SCENARIOS](https://plrisk.com/claim-scenarios)
    - [FAQs](https://plrisk.com/faqs)
    - [INDUSTRY TOOLS](https://plrisk.com/industry-tools)
    - [FREE CYBER HOTLINE](https://plrisk.com/free-cyber-hotline)
    - [GET APPOINTED](https://plrisk.com/for-agents)
- INDUSTRIES  
  WE SERVE
  
  
  
    - [TITLE AGENTS & MORTGAGE BROKERS](https://www.plrisk.com/real-estate/)
    - [REAL ESTATE](https://www.plrisk.com/real-estate/)
    - [LEGAL](https://www.plrisk.com/legal/)
    - [MEDIA](https://www.plrisk.com/media/)
    - [ARCHITECTS & ENGINEERS](https://www.plrisk.com/architects-engineers/)
    - [FINANCIAL INSTITUTIONS](https://www.plrisk.com/financial-institutions/)
    - [CONSULTING](https://www.plrisk.com/consulting/)
    - [MISC. SERVICES](https://www.plrisk.com/miscellaneous-services/)
    - [HEALTHCARE MEDICAL](https://www.plrisk.com/healthcare-medical/)
    - [INSURANCE](https://www.plrisk.com/insurance/)
    - [TECHNOLOGY](https://www.plrisk.com/technology/)
    - [SPACs](https://www.plrisk.com/spacs/)
- PRODUCTS
  
  
  
    - [PRODUCTS OVERVIEW](https://plrisk.com/products)
    - [Errors & Omissions](https://plrisk.com/products/errors-omissions)
    - [Directors & Officers](https://plrisk.com/products/directors-officers/)
    - [Commercial Crime](https://plrisk.com/products/commercial-crime/)
    - [EPLI](https://plrisk.com/products/employment-practices/)
    - [Fiduciary Liability](https://plrisk.com/products/fiduciary/)
    - [Cybersecurity](https://plrisk.com/products/cybersecurity/)
- [MERGERS & ACQUISITIONS](https://www.plrisk.com/wp-content/uploads/2023/03/PLR-Managing-Insurance-Coverage-eBook-03272023.pdf)
  
  
  
    - [Reps and Warranties](https://www.plrisk.com/wp-content/uploads/2023/06/PLR-Reps-and-Warranties-Onesheet.pdf)
    - [Reps and Warranties Sell](https://www.plrisk.com/wp-content/uploads/2023/06/PLR-Reps-and-Warranties-SellSide-Onesheet.pdf)
- [CANNABIS](https://www.plrisk.com/products/cannabis-insurance)
  
  
  
    - [Overview](https://www.plrisk.com/products/cannabis-insurance)
    - [Account Highlights](https://blog.plrisk.com/hubfs/PLR%20-%20Cannabis%20Assets/PLR-CANNABIS-account%20highlights_Onesheet-V2.pdf)
    - [Commercial Crime](https://www.plrisk.com/cannabis-business-insurance-commercial-crime)
    - [Commercial Property](https://www.plrisk.com/cannabis-commercial-property/)
    - [Cyber Liability](https://www.plrisk.com/cannabis-business-insurance-cyber-liability/)
    - [D&O](https://www.plrisk.com/cannabis-directors-officers-do-liability/)
    - [E&O](https://www.plrisk.com/cannabis-errors-omissions-eo/)
    - [EPLI](https://www.plrisk.com/cannabis-employment-practices-liability/)
    - [General Liability](https://www.plrisk.com/cannabis-general-liability/)
    - [Product Liability](https://www.plrisk.com/cannabis-product-liability/)
    - [Workers’ Comp](https://www.plrisk.com/cannabis-business-insurance-workers-compensation/)
- [SELECT](https://www.plrisk.com/products/select-division/)
- ABOUT
  
  
  
    - [Our Team](https://plrisk.com/about-us/)
    - [Our Charity](https://plrisk.com/helping-hands/)
    - [Careers](https://www.plrisk.com/careers/)
- NEWSROOM
  
  
  
    - [BLOG](https://blog.plrisk.com)
    - [NEWSLETTERS](https://www.plrisk.com/plr-newsletters/)
- QUOTE  
  ONLINE
  
  
  
    - [Hiscox NOW Small Business Insurance](https://www.hiscox.com/partner-agent/plriskadvisors)
    - [Custom Quote](https://www.hiscox.com/partner-agent/plriskadvisors)

×

### Get A Quote

# US Treasury Department Warns Companies Paying Cyber Ransom Could Violate OFAC Rules

[Drew Smith](https://blog.plrisk.com/author/drew-smith)

 Oct 19, 2020, 11:00:00 AM

![](https://blog.plrisk.com/hubfs/pexels-karolina-grabowska-4386155.jpg)

![pexels-karolina-grabowska-4386155](https://blog.plrisk.com/hs-fs/hubfs/pexels-karolina-grabowska-4386155.jpg?width=6720&name=pexels-karolina-grabowska-4386155.jpg)

In an advisory posted October 1st, the US Department of Treasury’s Office of Foreign Asset Control (OFAC) issued a notice that any businesses that pay a ransom may face fines if these ransom requests come from a state that is already under US economic sanctions. “Companies that facilitate ransomware payments to cyber actors on behalf of victims, including financial institutions, cyber insurance firms, and companies involved in digital forensics and incident response, not only encourage future ransomware payment demands but also may risk violating OFAC regulations.”[\[1\]](https://blog.plrisk.com/us-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules#_ftn1)

This is significant given the current trends in cyber ransom requests and payments. According to Coalition, a new emerging cyber carrier, in a recent webinar, they stated they have seen increases in cyber ransom demands of 47% from the first quarter to the second quarter of 2020 alone. According to Mike Smith, President and CEO of Axis Insurance Services, LLC, “Out of 3,000 customers and in our small subset of the industry we have almost a dozen cyber ransoms in excess of $1M with demands as high as $10M. The amount of the demands have increased from a low of $500 three years ago to, at a minimum, several hundred thousands on every demand. What is worse, that they have evolved to not only encrypt your data but threaten to expose it on the internet if not paid.” This means that even if companies have great backup systems and can restore their data, they are really being forced to pay the ransom to avoid public disclosure of their data which can have further financial consequences.

Many of the known hackers including the makers of the Cryptolocker virus have ties to organizations based out of countries like North Korea, Iran and Russia. OFAC’s warning to discourage companies from paying ransoms follows the FBI’s similar advice, even though it seems like an easier way to get back to relative normalcy. OFAC is willing to go a step further in potentially imposing fines of up to $20 million if they do not have a special exemption from them and even include jail time. Ginger Faulk, a partner of the law firm Eversheds Sutherland has said that the penalties for sanctions violations based on “strict liability”, meaning that a person subject to U.S. jurisdiction may be held civilly liable even if it did not know or have reason to know it was engaging in a transaction with a person that is prohibited under sanctions laws and regulations administered by OFAC. [***\[2\]***](https://blog.plrisk.com/us-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules#_ftn2)

With hackers appearing every day, countries are taking every possible precaution to try and protect their data. OFAC’s warning is designed to as a way to cut off the ransoms to malicious actors by getting companies to think twice on paying their ransoms.

[\[1\]](https://blog.plrisk.com/us-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules#_ftnref1) [https://krebsonsecurity.com/2020/10/ransomware-victims-that-pay-up-could-incur-steep-fines-from-uncle-sam/](https://krebsonsecurity.com/2020/10/ransomware-victims-that-pay-up-could-incur-steep-fines-from-uncle-sam/)

[\[2\]](https://blog.plrisk.com/us-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules#_ftnref2) [https://home.treasury.gov/system/files/126/ofac\_ransomware\_advisory\_10012020\_1.pdf?mkt\_tok=eyJpIjoiWldObU56WTVOR1JrTXpneiIsInQiOiJGK3c1bUVoOVRZWnJMZmMxeEhDMUgyZDNrbmdGc1FEWjlnTWpkcmh1QmN5NW04bG5rUzM2VXEzR1NsWTdKSVRZMllhcmo2TjU5RGtnWWsxelwvVEpWUHJhNkU1bkFHTFwvajRQcWZ4Zzl3XC9NekxxMURLWU5nNkhRaXZDY1JMb2kzdiJ9](https://home.treasury.gov/system/files/126/ofac_ransomware_advisory_10012020_1.pdf?mkt_tok=eyJpIjoiWldObU56WTVOR1JrTXpneiIsInQiOiJGK3c1bUVoOVRZWnJMZmMxeEhDMUgyZDNrbmdGc1FEWjlnTWpkcmh1QmN5NW04bG5rUzM2VXEzR1NsWTdKSVRZMllhcmo2TjU5RGtnWWsxelwvVEpWUHJhNkU1bkFHTFwvajRQcWZ4Zzl3XC9NekxxMURLWU5nNkhRaXZDY1JMb2kzdiJ9)

## Recent Posts

- [Tracking Cookies Beginning to Run Afoul of Consumer Data Protection Laws](https://blog.plrisk.com/tracking-cookies-beginning-to-run-afoul-of-consumer-data-protection-laws)
- [PLRisk welcomes Jeffery Phi to their growing Wholesale Broker roster](https://blog.plrisk.com/plrisk-welcomes-jeffery-phi-to-their-growing-wholesale-broker-roster)
- [PLRisk Welcomes Michelle Delaney as Wholesale Account Manager](https://blog.plrisk.com/plrisk-welcomes-michelle-delany-as-wholesale-account-manager)
- [PLRisk Spotlights Rachel Coughlin](https://blog.plrisk.com/plrisk-spotlights-rachael-coughlin)
- [PLRisk congratulates Matt Culkin on joining NJYIP Board](https://blog.plrisk.com/plrisk-congratulates-matt-culkin-on-joining-njyip-board)

Search

### Share this post

[![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.plrisk.com%2Fus-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.plrisk.com%2Fus-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/x-twitter-color.png?width=24&name=x-twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.plrisk.com%2Fus-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.plrisk.com%2Fus-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png)](mailto:?subject=Check%20out%20https%3A%2F%2Fblog.plrisk.com%2Fus-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fblog.plrisk.com%2Fus-treasury-department-warns-companies-paying-cyber-ransom-could-violate-ofac-rules%3Futm_medium%3Dsocial%26utm_source%3Demail)

### Subscribe to our blog

[![PLRisk-LogoWhite](https://blog.plrisk.com/hs-fs/hubfs/PLRisk-LogoWhite.png?width=400&height=123&name=PLRisk-LogoWhite.png "PLRisk-LogoWhite")](https://plrisk.com/)

### Stay connected to learn the latest from PLRisk

By clicking submit I agree to the  [Privacy Policy](https://www.plrisk.com/privacy-policy)  and [Terms & Conditions.](https://www.plrisk.com/terms-conditions/)

###### 795 Franklin Avenue, Suite 210 Franklin Lakes, NJ 07417 Tel: (855) 403-5982 Fax: 201-847-9174

- RESOURCES 
    - [DOWNLOAD APPLICATIONS](https://plrisk.com/applications)
    - [FILE A CLAIM](https://plrisk.com/file-a-claim)
    - [CLAIM SCENARIOS](https://plrisk.com/claim-scenarios)
    - [FAQs](https://plrisk.com/faqs)
    - [INDUSTRY TOOLS](https://plrisk.com/industry-tools)
    - [FREE CYBER HOTLINE](https://plrisk.com/free-cyber-hotline)
    - [GET APPOINTED](https://plrisk.com/for-agents)
- PRODUCTS 
    - [PRODUCTS OVERVIEW](https://plrisk.com/products)
    - [ERRORS & OMISSIONS](https://plrisk.com/products/errors-omissions)
    - [DIRECTORS & OFFICERS](https://plrisk.com/products/directors-officers/)
    - [COMMERCIAL CRIME](https://plrisk.com/products/commercial-crime/)
    - [EMPLOYMENT PRACTICES](https://plrisk.com/products/employment-practices/)
    - [FIDUCIARY LIABILITY](https://plrisk.com/products/fiduciary/)
    - [CYBERSECURITY](https://plrisk.com/products/cybersecurity/)
- PROFESSIONS 
    - [TITLE AGENTS & MORTGAGE BROKERS](https://plrisk.com/real-estate/)
    - [REAL ESTATE](https://plrisk.com/real-estate/)
    - [LEGAL](https://plrisk.com/legal)
    - [MEDIA](https://plrisk.com/media)
    - [ARCHITECTS & ENGINEERS](https://plrisk.com/architects-engineers/)
    - [FINANCIAL INST.](https://plrisk.com/financial-institutions/)
    - [CONSULTING](https://plrisk.com/consulting/)
    - [MISC. SERVICES](https://plrisk.com/miscellaneous-services/)
    - [HEALTHCARE/MEDICAL](https://plrisk.com/healthcare-medical/)
    - [INSURANCE](https://plrisk.com/insurance/)
    - [TECHNOLOGY](https://plrisk.com/technology/)
- ABOUT 
    - [OUR TEAM](https://www.plrisk.com/about-us/)
    - [BLOG](https://blog.plrisk.com/)
    - [OUR CHARITY](https://plrisk.com/helping-hands/)
    - [CAREERS](https://www.plrisk.com/careers/)
    - [PRIVACY POLICY](https://www.plrisk.com/privacy-policy)
    - [TERMS & CONDITIONS](https://www.plrisk.com/terms-conditions/)
    - [ACCESSIBILITY STATEMENT](https://www.plrisk.com/accessibility-statement/)
    - [STATE LICENSES](https://www.plrisk.com/state-licenses/)

Copyright © 2023 PLRisk | All Rights Reserved | [Privacy Policy](https://www.plrisk.com/privacy-policy)

PLRisk Specialty Insurance Agency LLC is a licensed insurance broker legally operating in the state of New Jersey under license number NJ 3002329782 and in California DBA NJ PLRisk Specialty Insurance Agency LLC, License number CA 6009937