During a ransomware attack, the attacker claims to have exfiltrated personal data before encrypting it. Under CCPA, what obligation may this trigger?
-
A
Mandatory law enforcement referral within 24 hours
-
B
Notification to affected California residents if the data meets breach definition criteria
-
C
Suspension of all data processing operations
-
D
Automatic regulatory fine of $7,500 per record