This session will share lessons learned, through a combination of hard data and anecdotal stories, from investigating and responding to ransomware and multifaceted extortion attacks. This will include: metrics on extortion amounts, tactics, and payments; trends/merits of extortion payment recovery by law enforcement; and insights from victims’ mistakes and successes re: effective cyber defense.