Regulatory action taken following ransomware report

The Information Commissioner's own data does not show a clear correlation between reports being filed outside of the time period required by data protection law and its enforcement actions in response.