My Surat business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the event of a ransomware attack on your business computers in Surat, it is advisable to report the incident to the authorities rather than paying the ransom.

Paying the ransom does not guarantee the recovery of your data and may further perpetuate the criminal activity. Moreover, it can encourage cybercriminals to continue their operations. Instead, follow these steps:

• Report to Law Enforcement: Immediately contact your local police station or Cyber Crime Cell. In India, you can also report to the National Cyber Crime Reporting Portal at cybercrime.gov.in, established under Section 70B of the Information Technology Act, 2000.
• Document the Incident: Keep a record of all communications and actions taken concerning the ransomware attack. This includes screenshots, emails, and any ransom notes received.
• Assess Data Backup: Check if you have a recent backup of your data stored offline or in a secure cloud environment. If available, restoring from backup may be the best option.
• Consult Cyber Security Experts: Engage with IT professionals or cybersecurity firms that specialize in ransomware recovery. They can assist in assessing the damage and help you recover your data safely.
• Notify Affected Parties: If any customer or employee data has been compromised, you must inform them as per the guidelines set out in the Personal Data Protection Bill, which emphasizes data breach notifications.
• Implement Security Measures: Post-incident, review and enhance your cybersecurity protocols to prevent future attacks. This may include regular software updates, employee training, and stronger access controls.

Under the Information Technology Act, 2000, particularly Section 66, hacking is a criminal offense, and reporting such incidents helps law enforcement track and combat cybercrime effectively. Additionally, the IT (Amendment) Act, 2008 emphasizes the importance of securing electronic data and systems.

In summary, avoid paying the ransom and report the incident to the authorities to ensure proper investigation and recovery while reinforcing your business's cybersecurity measures.