My Patna business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the case of a ransomware attack on your business computers in Patna, it is advisable to report the incident to the authorities rather than paying the ransom.

Paying the ransom does not guarantee the recovery of your data and may encourage further criminal activity. Here are the steps and considerations you should take into account:

• Report the Incident: You must report the ransomware attack to the local police and the Cyber Crime Cell. Under Section 66 of the Information Technology Act, 2000, unauthorized access and data breaches are punishable offenses.
• Document Evidence: Gather all relevant information about the attack, such as ransom notes, system logs, and any communications from the attackers. This documentation will be essential for any investigation and insurance claims.
• Notify Your IT Team: If you have an IT department or external cybersecurity professionals, inform them immediately. They can help in assessing the damage and possibly recovering the data without paying the ransom.
• Assess Data Backup: Check if you have recent backups of your data. If backups are available, it may be more efficient to restore your systems from these backups instead of paying the ransom.
• Consult Legal Counsel: Consider seeking legal advice to understand your rights and obligations following the attack. Legal counsel can help you navigate the complexities of cyber law and data protection.
• Notify Affected Parties: If customer data or sensitive information is compromised, you may need to notify affected individuals as per the provisions of the Personal Data Protection Bill, 2019, which emphasizes transparency and accountability in data handling.
• Consider Future Prevention: After addressing the immediate threat, invest in cybersecurity measures to prevent future incidents. This may include employee training, regular software updates, and implementing robust security protocols.

In addition to local law enforcement, you can also report the incident to the Indian Computer Emergency Response Team (CERT-In) to aid in tracking down the perpetrators and preventing further attacks.

By following these steps and prioritizing reporting over paying the ransom, you can better protect your business and contribute to the larger fight against cybercrime in India.