Ransomware is a special form of malware that encrypts data on infected IT systems. Attackers subsequently demand payment of a ransom, claiming that they will then enable the victim to decrypt the data again. Even after the ransom is paid, however, there is no guarantee that the data can be recovered.

Encryption is not restricted to the local data of the infected IT system. Many forms of ransomware look for network drives with write access in order to encrypt all their data, as well.

This means that all encrypted information dating back to the most recent backup can be lost, even if a ransom is paid. Along with the IT system originally infected, this may affect the centrally stored information accessed by multiple IT systems.