My Srinagar business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the event of a ransomware attack on your business computers in Srinagar, it is advisable to report the incident to the authorities rather than paying the ransom.

Here are the key reasons and steps to take following a ransomware attack:

• Legal Implications: Paying the ransom does not guarantee you will regain access to your data and could potentially make you a target for future attacks. Additionally, under the Information Technology Act, 2000, Section 66, any unauthorized access to computer resources is a crime, and paying the ransom may indirectly support criminal activities.
• Reporting the Incident: You should report the ransomware attack to the local police in Srinagar. The police may involve cybercrime units to investigate the matter. You can also file a complaint with the Cyber Crime Cell of the Jammu and Kashmir Police.
• Notify CERT-In: The Computer Emergency Response Team of India (CERT-In) provides assistance for cyber incidents. Reporting the incident to CERT-In can help in sharing information on the attack and potentially preventing future occurrences.
• Document the Incident: Keep a detailed record of the ransomware attack, including messages received, the date and time of the attack, and any communications with the attackers. This information will be useful for law enforcement agencies.
• Assess Data Backup: Check if you have up-to-date backups of your data. If available, restoring from a backup may be a viable option without succumbing to the ransom demands.
• Consult with Cybersecurity Experts: Engage with cybersecurity professionals who can assist in safely removing the ransomware and recovering your data without paying the ransom.
• Implement Preventative Measures: After addressing the current issue, take steps to enhance your cybersecurity measures, such as regular software updates, employee training on cybersecurity awareness, and establishing a robust backup routine.

In summary, while the immediate pressure of a ransomware attack can be daunting, reporting the incident and seeking professional help is generally the most prudent course of action. This not only helps protect your business but also contributes to broader efforts against cybercrime in India.