My Jodhpur business computers were locked by ransomware; should I pay or report it?
RE Asked by Reshma Pillai from India
Quick Answer
Paying a ransom is discouraged because it funds organised crime and does not guarantee data recovery; the recommended course is to report the attack immediately.
Detailed Legal Analysis
Paying a ransom is discouraged because it funds organised crime and does not guarantee data recovery; the recommended course is to report the attack immediately. File an FIR at the Jodhpur cyber police station under Sections 318(4) of the Bharatiya Nyaya Sanhita and Section 66 of the IT Act for unauthorised access and extortion.
Notify CERT-In within six hours as mandated by its 2022 directions for any cyber incident. The Rajasthan High Court can be approached if the police fail to register the FIR or to take forensic steps.
Rajasthan Rent Control Act 2001 on data protection may impose a separate obligation to inform affected customers if their personal data was exfiltrated. Isolate the infected systems, preserve the ransom note and the encrypted file samples for forensic analysis.
Engage a CERT-In empanelled auditor in Jodhpur to assess the breach and restore from backups where available.
Legal Provisions Referenced
Verify the current statutory text at India Code (the official repository of Indian legislation) or the Legislative Department. This answer is general legal information, not advice on your specific matter.
Disclaimer: AI-generated for educational purposes only. Does not constitute legal advice. Consult a qualified practitioner.