> Now the attacker has your medical history, tax and bank statements, contracts, ... your whole life to pick and choose the ransom amount.
But can't the attacker get most of that even without your PDFs? If the attacker can get access to my computer, the attacker can directly log into my bank account, access my insurance contracts... there is no need to access the PDFs, you can get most of the stuff directly by logging into the right site (or intercepting the session while I am logging in).
But can't the attacker get most of that even without your PDFs? If the attacker can get access to my computer, the attacker can directly log into my bank account, access my insurance contracts... there is no need to access the PDFs, you can get most of the stuff directly by logging into the right site (or intercepting the session while I am logging in).