My Belgaum business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the case of a ransomware attack on your business computers in Belgaum, it is advisable to report the incident to law enforcement authorities rather than paying the ransom.

Paying the ransom does not guarantee that you will regain access to your data and may encourage further criminal activity. Reporting the incident can help law enforcement track down the perpetrators and potentially recover your data. Here are the key steps and considerations:

• Reporting the Incident:
  • Contact the local police station and file a First Information Report (FIR). According to Section 154 of the Code of Criminal Procedure, 1973, any person can report a cognizable offense, which includes cybercrimes.
  • Provide as much information as possible, including the type of ransomware, any ransom notes, and details about your computer systems.
• Notify the Cyber Crime Cell:
  • Reach out to the Cyber Crime Cell in your state. Under the Information Technology Act, 2000, particularly Section 66, offenses related to hacking and data breaches fall under their jurisdiction.
  • Visit the National Cyber Crime Reporting Portal (https://cybercrime.gov.in) to file a complaint online.
• Preserve Evidence:
  • Take screenshots of the ransom note and document any actions taken by the ransomware.
  • Do not attempt to reboot or alter the infected systems until you have consulted with authorities or cybersecurity professionals.
• Consult Cybersecurity Experts:
  • Engage with cybersecurity professionals who can assess the damage and help in data recovery efforts.
  • Consider implementing stronger cybersecurity measures to prevent future attacks.
• Legal Obligations:
  • Understand your legal obligations under the Personal Data Protection Bill, which mandates reporting data breaches affecting personal data.
  • Ensure compliance with the IT Act, 2000, particularly regarding the protection of sensitive personal data.

In conclusion, while ransomware attacks can be devastating, the best course of action is to report the incident to the authorities and seek professional help to mitigate the damage and prevent future occurrences.