One company actually offered free credit monitoring protection to employees who had been affected. My impression is that this is a service that the company offered on its own, in good faith, to its employees. That said, it is an afterthought, not prevention.
I would like to come back to what the government can do to protect businesses. What can it do upstream? What can it do afterwards?
Ransoms are certainly being demanded; most of the time these groups want money. In fact, there was a CBC/Radio-Canada article that explained how this kind of group could demand a second ransom.
How can the government intervene? To your knowledge, is this kind of surveillance protection service currently available to Quebec and Canadian businesses?