My Saharanpur clinic's computers were encrypted by ransomware and the attackers are demanding ₹5 lakh. What should I do?
SN Asked by Sneha Iyer from India
Quick Answer
Do not pay the ransom; report the attack immediately to the cyber crime police station in Saharanpur under Section 66 of the IT Act, 2000 and Section 111 BNS, 2023 (extortion).
Detailed Legal Analysis
Do not pay the ransom; report the attack immediately to the cyber crime police station in Saharanpur under Section 66 of the IT Act, 2000 and Section 111 BNS, 2023 (extortion). Inform CERT-In (cert-in.org.in) within six hours as mandated by the CERT-In Directions of 2022.
Preserve the encrypted systems and ransom note as electronic evidence under Section 63B BSA, 2023 — do not wipe or restore before forensic imaging. Engage a CERT-In empanelled auditor for incident response.
If patient data was leaked, notify affected individuals under SPDI Rules, 2011 and the DPDP Act, 2023. If police fail to act, move Allahabad High Court under Article 226 for a direction.
Check Uttar Pradesh Rent Control Act 1972 for any state cybersecurity incident reporting protocol.
Disclaimer: AI-generated for educational purposes only. Does not constitute legal advice. Consult a qualified practitioner.