My Vellore business computers were locked by ransomware; should I pay or report it?

Detailed Legal Analysis

In the event of a ransomware attack on your Vellore business computers, it is advisable to report the incident rather than pay the ransom.

Paying the ransom may not guarantee the return of your data and could encourage further criminal activity. Reporting the incident helps law enforcement agencies take action against cyber criminals and may assist in recovering your data through investigation. Here are the steps and considerations to follow:

• Immediate Response:
  • Disconnect the infected computers from the network to prevent the spread of the ransomware.
  • Assess the extent of the damage and identify which files and systems are affected.
• Document the Attack:
  • Take screenshots of any ransom notes and document the timestamp.
  • Keep track of any unusual activity on your systems prior to the attack.
• Report to Authorities:
  • Report the incident to the local police station. Under Section 66 of the Information Technology Act, 2000, hacking and data theft are crimes, and the police can assist in the investigation.
  • File a complaint with the Cyber Crime Cell in your state. In Tamil Nadu, you can reach out to the Cyber Crime Police Station in Chennai.
• Inform Your Stakeholders:
  • Notify employees and stakeholders about the incident to ensure awareness and prevent further issues.
  • Consider informing customers if their data may have been compromised, as per the obligations under the Personal Data Protection Bill, which is aimed at safeguarding user data.
• Seek Professional Help:
  • Engage cybersecurity professionals to help analyze the attack and recover data if possible.
  • Consider consulting legal experts familiar with cyber law to understand your rights and obligations.

In summary, reporting a ransomware attack is crucial for both legal compliance and the potential recovery of your data. Always focus on strengthening your cybersecurity measures to prevent future incidents.