Ransomware, explained for business owners

It's the threat that turns a normal Tuesday into a company emergency.

You don't need to understand the technical details — you need to understand how it gets in and what actually keeps you safe. Here it is, plainly.

01 What ransomware does

It encrypts your files — locks them so you can't open them — then demands payment for the key. Modern versions also steal a copy of your data first and threaten to leak it, so paying doesn't even guarantee the problem goes away.

02 How it gets in

Almost always through one of three doors: a staff member clicking a malicious link or attachment, a stolen or weak password on a remote-access service, or an unpatched system with a known hole. Notice that all three are preventable.

03 The defences that actually work

• Isolated, tested backups. The one thing that lets you recover without paying — as long as the ransomware can't reach the backup too.
• MFA everywhere. Stops the stolen-password route cold.
• Patching. Closes the known holes before they're used.
• A team that spots phishing. The human firewall on the most common entry point.

04 Should you ever pay?

The strong advice is no — it funds the crime, marks you as a payer, and often doesn't fully restore your data. With good isolated backups, you don't have to even consider it. That's the whole point of preparing in advance.