My Davangere business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the event of a ransomware attack on your business computers in Davangere, it is generally advisable to report the incident rather than pay the ransom.

Paying the ransom does not guarantee the recovery of your data and may encourage further criminal activity. Reporting the incident can help law enforcement agencies track cyber criminals and may also provide you with support for recovery. Below are the steps and considerations to take into account:

• Report the Incident:
  • Contact your local police station to file a First Information Report (FIR). Under Section 154 of the Code of Criminal Procedure, 1973, any information regarding a cognizable offense must be registered.
  • Notify the Cyber Crime Cell of the local police or the National Cyber Crime Reporting Portal (cybercrime.gov.in) to report the cybercrime.
• Assess the Situation:
  • Determine the extent of the attack, identifying which systems are affected and what data is compromised.
  • Check for any backup systems that may allow you to restore data without paying the ransom.
• Consult Experts:
  • Engage cybersecurity professionals to evaluate the breach and assist in data recovery.
  • Consider consulting a legal expert specializing in cyber law to understand your rights and obligations.
• Document Everything:
  • Keep detailed records of the attack, including timestamps, messages from the ransomware, and actions taken.
  • This documentation will be crucial for law enforcement and for insurance claims, if applicable.
• Review Cybersecurity Policies:
  • Post-incident, reassess your cybersecurity measures to prevent future attacks. This is also in line with the Information Technology Act, 2000, which mandates reasonable security practices.
  • Implement regular training and awareness programs for employees regarding phishing and other cyber threats.

Under the Information Technology Act, 2000, specifically Section 66 and Section 66F, ransomware attacks are categorized as cybercrimes, and reporting them is essential for legal recourse. Additionally, compliance with the General Data Protection Regulation (GDPR) and the Indian Personal Data Protection Bill (once enacted) may impose further obligations on handling data breaches.

In conclusion, prioritize reporting the ransomware attack over paying the ransom to safeguard your business and contribute to the fight against cybercrime.