My New Delhi business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the event that your business computers in New Delhi have been locked by ransomware, it is advisable to report the incident to the authorities rather than pay the ransom.

Here are the key reasons and steps you should consider:

• Legal Obligations: Under the Information Technology Act, 2000, particularly Section 66, hacking and unauthorized access to computer systems are criminal offenses. Reporting the incident helps in documenting the crime and may assist in legal proceedings against the perpetrators.
• Data Protection: The Personal Data Protection Bill (currently under consideration) emphasizes the importance of safeguarding personal data. Reporting the ransomware attack helps ensure compliance with any future legal obligations regarding data breaches.
• Risk of Paying Ransom: Paying the ransom does not guarantee that you will regain access to your data or that the attackers will not target you again. It may also encourage further criminal activity.
• Contact Authorities: You should report the ransomware attack to the Cyber Crime Cell of the Delhi Police. You can file a complaint online at the National Cyber Crime Reporting Portal (cybercrime.gov.in).
• Incident Documentation: Document all relevant details of the attack, including timestamps, the nature of the ransomware, and any communication with the attackers. This evidence will be crucial for law enforcement investigations.
• Inform Stakeholders: Notify employees, clients, and stakeholders about the incident, especially if personal data may have been compromised, as per the obligations outlined under the IT Act.
• Consult Cybersecurity Professionals: Engage with cybersecurity experts to analyze the attack, recover data if possible, and implement measures to prevent future incidents.

Furthermore, under the provisions of the IT Act, you may also be eligible for compensation for losses incurred due to cybercrime. Section 43(a) states that any person who causes damage to a computer, computer system, or network shall be liable to pay damages to the affected party. Reporting the incident can also help in claiming such damages.

Ultimately, the decision to engage with law enforcement and cybersecurity professionals will provide a more strategic response to the ransomware attack while ensuring compliance with Indian law.