Ransomware scrambles your files and demands payment to unlock them. Small businesses are hit often, because they're easier targets than big companies. The good news: a few basics stop most of it, and good backups mean you never have to pay.
How it usually gets in
- A convincing e-mail with a link or attachment
- A stolen or reused password, especially on e-mail or remote access
- Computers or routers that haven't had updates for a long time
- Remote access left open to the internet
The five things that protect you most
- Backups with a copy the ransomware can't reach: off-site or offline, tested regularly
- Two-step sign-in on e-mail, remote access and admin accounts
- Updates turned on for computers, routers and important software
- Separate everyday accounts from admin accounts, so one click can't change everything
- A team that knows how to spot a scam e-mail, and feels safe reporting a mistake
If it happens
- Unplug affected computers from the network (don't turn them off, and don't wipe them yet)
- Call your IT help straight away
- Don't contact the criminals, and don't pay without expert advice: the FBI advises against paying, and paying doesn't guarantee you get your files back
- Report it to the FBI at ic3.gov
- Restore from a clean backup once you know how it got in
We set up backups with an off-site copy and test that files really come back, turn on two-step sign-in, and check the rest of the list with you.
Need a hand?
More about our data backup help. Or tell us what's going on and we'll get back to you.
Send us a message or call (208) 745-2981, Monday to Friday, 9 to 5.