My Bhagalpur clinic's computers were encrypted by ransomware and the attackers are demanding ₹5 lakh. What should I do?
AS Asked by Ashok Yadav from India
Quick Answer
Do not pay the ransom; report the attack immediately to the cyber crime police station in Bhagalpur under Section 66 of the IT Act, 2000 and Section 111 BNS, 2023 (extortion).
Detailed Legal Analysis
Do not pay the ransom; report the attack immediately to the cyber crime police station in Bhagalpur under Section 66 of the IT Act, 2000 and Section 111 BNS, 2023 (extortion). Inform CERT-In (cert-in.org.in) within six hours as mandated by the CERT-In Directions of 2022.
Preserve the encrypted systems and ransom note as electronic evidence under Section 63B BSA, 2023 — do not wipe or restore before forensic imaging. Engage a CERT-In empanelled auditor for incident response.
If patient data was leaked, notify affected individuals under SPDI Rules, 2011 and the DPDP Act, 2023. If police fail to act, move Patna High Court under Article 226 for a direction.
Check Bihar Rent Control Act 2017 for any state cybersecurity incident reporting protocol.
Legal Provisions Referenced
Verify the current statutory text at India Code (the official repository of Indian legislation) or the Legislative Department. This answer is general legal information, not advice on your specific matter.
Disclaimer: AI-generated for educational purposes only. Does not constitute legal advice. Consult a qualified practitioner.