Ransomware and small businesses: 7 habits that keep your files safe

What ransomware does

Ransomware is malicious software that locks or encrypts your files and asks for money to unlock them. Small shops, clinics and offices are common targets because they often have valuable data and few security controls.

7 habits that make a real difference

1. Back up, and keep one copy offline. Follow the 3-2-1 idea: three copies, on two kinds of storage, one kept offline or off-site. Test that you can restore.
2. Update everything. Turn on automatic updates for Windows, browsers and apps. Old software is the easiest way in.
3. Use real security software. A good antivirus with ransomware protection blocks many attacks before files are touched.
4. Think before you click. Fake invoices, courier messages and “urgent” payment requests are the most common bait.
5. Strong, unique passwords plus two-step login. A password manager makes this easy for the whole team.
6. Limit admin rights. Daily work should happen on accounts that can't install software.
7. Have a plan. Know who to call and which devices to disconnect if something looks wrong.

If you are hit

• Disconnect the affected device from Wi-Fi and the network straight away.
• Don't delete anything. Take photos of the ransom message.
• Report it on the national cyber-crime portal (cybercrime.gov.in) or call the helpline 1930.
• Restore from a clean backup once the device is cleaned.