Have I Been Pwned Founder Troy Hunt talks Breaches, Ransomware & Online Safety

How are AI and automation shaping both the attack and defense sides of cybersecurity? On this episode of Digital Disruption, we’re joined by the founder and CEO of Have I Been Pwned, Troy Hunt. Troy Hunt is an Australian security researcher and the founder of the data breach notification service, Have I Been Pwned. With a background in software development specializing in information security, Troy is a regular conference speaker and trainer. He frequently appears in the media, collaborates with government and law enforcement agencies, and has appeared before the U.S. Congress as an expert witness on the impact of data breaches. Troy also serves as a Microsoft Regional Director (an honorary title) and regularly blogs at troyhunt.com from his home on Australia’s Gold Coast. Troy sits down with Geoff to share eye-opening insights on the evolving threat landscape of 2025 and beyond. Despite the rise of AI and automation, Troy emphasizes that many of today’s most damaging data breaches and ransomware attacks still stem from basic human error and social engineering. He explains how ransomware has shifted from encrypting files to threatening data disclosure, making it harder for organizations to manage risk and justify ransom payments. The conversation also touches on how breach fatigue and apathy have led many individuals and businesses to underestimate cybersecurity risks, even as incidents rise globally. He also highlights how AI tools are being weaponized by both defenders and attackers and argues that cybersecurity isn’t about perfect protection but about finding equilibrium: balancing usability, education, and risk mitigation. In this episode: 00:00 Intro 01:15 Why human weakness beats AI 02:00 Young hackers and the rise of scattered spider 04:00 From hacktivists to career criminals 05:00 Ransomware’s new tactics 07:30 Should companies pay the ransom? 10:20 Can you ever be fully protected? Defense vs. response 11:20 How to convince boards cybersecurity is worth the money 14:20 Breach fatigue and public apathy 18:00 Reframing what ‘sensitive data’ really means 20:00 Passwords, reuse, and the real risk equation 24:00 Biometrics, face ID & the future of authentication 26:30 Threat Modeling 101 27:30 Barriers to cyber preparedness 29:30 How Have I Been Pwned works 32:00 The Future of Data Breaches 38:00 Microsoft’s Role in the Security Ecosystem 40:30 AI Hype vs. reality in cybersecurity 43:00 When AI helps hackers 52:00 Why transparency still matters after every breach 54:00 Accepting risk, building resilience Connect with Troy: Website: https://www.troyhunt.com/ LinkedIn: https://www.linkedin.com/in/troyhunt/ X: https://x.com/troyhunt Visit our website: https://www.infotech.com/?utm_source=youtube&utm_medium=social&utm_campaign=podcast Follow us on YouTube: https://www.youtube.com/@InfoTechRG