My Guwahati business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the case of a ransomware attack on your business computers in Guwahati, it is advisable to report the incident to law enforcement rather than paying the ransom.

Here are some important considerations and steps to take in such situations:

• Legal Obligations: Under the Information Technology Act, 2000, and its amendments, businesses are required to report cyber incidents like ransomware attacks. Specifically, Section 66 of the IT Act outlines penalties for cybercrimes, and Section 70B mandates the reporting of data breaches to the Indian Computer Emergency Response Team (CERT-IN).
• Potential Risks of Paying Ransom:
  • Paying the ransom does not guarantee the recovery of your data.
  • It may encourage further attacks on your business or others.
  • There is a risk of legal repercussions as paying ransom may violate regulations regarding the funding of criminal activities.
• Immediate Steps to Take:
  • Isolate the infected machines from the network to prevent further spread.
  • Assess the extent of the damage and identify which data is affected.
  • Contact your IT department or a professional cybersecurity service to evaluate your options for data recovery.
  • Document all information about the attack, including ransom notes, timestamps, and system logs.
• Report the Incident:
  • Contact local law enforcement authorities and file a complaint.
  • Notify CERT-IN and provide them with all relevant details of the attack.
  • Consider informing your clients or stakeholders if their data may have been compromised, adhering to transparency requirements under data protection laws.
• Future Prevention Strategies:
  • Regularly back up data to an offline or secure location to mitigate the impact of future attacks.
  • Implement robust cybersecurity measures, including firewalls, antivirus software, and employee training on recognizing phishing attempts.
  • Stay updated on the latest cybersecurity threats and best practices.

In conclusion, it is crucial to report the ransomware attack and seek professional assistance rather than paying the ransom, as this aligns with legal obligations and may protect your business from future attacks.