Been hacked? Now to decide if you chase the WHO or the HOW

Imagine a security researcher has plucked your customer invoice database from a command and control server. You’re nervous and angry. Your boss will soon be something worse and will probably want you to explain who pulled off the heist, and how.

But only one of these questions, the how, is worth your precious resources; security experts say the who is an emotional distraction.