My Mangalore business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the case of ransomware attacks, it is advisable to report the incident to law enforcement agencies rather than paying the ransom.

Paying the ransom does not guarantee the recovery of your data and may encourage further criminal activity. Here are the steps you should consider taking:

• Immediate Response:
  • Isolate affected computers from the network to prevent further spread.
  • Document the ransomware message and any other relevant information.
• Report the Incident:
  • Contact the Cyber Crime Cell of the local police in Mangalore. According to the Indian Penal Code (IPC) Section 66, cyber crimes, including ransomware, are prosecutable offenses.
  • File a complaint under the Information Technology Act, 2000, particularly under Section 66 for hacking and Section 67 for publishing or transmitting obscene material in electronic form.
• Consult with Cyber Security Experts:
  • Engage cybersecurity professionals to analyze the breach and help recover data if possible.
  • Implement measures to strengthen your security against future attacks.
• Notify Stakeholders:
  • If personal data is compromised, notify affected customers or clients as per the GDPR-like provisions in India under the Personal Data Protection Bill, which emphasizes data protection and privacy.
  • Consider informing your insurance provider if you have cyber insurance.
• Review and Strengthen Cybersecurity Policies:
  • Conduct a thorough analysis of existing cybersecurity measures.
  • Implement regular training for employees on recognizing phishing attempts and other threats.
  • Regularly back up data and maintain an updated recovery plan.

Paying the ransom can also have legal implications, as it may be seen as facilitating illegal activity. Additionally, if your business handles sensitive data, compliance with data protection laws is paramount. Thus, focusing on reporting and recovery is the preferred approach.