Ransomware is a type of malicious software (malware) that criminals use to deny you access to your computers, devices, and patient data. Infections usually begin with an email directing the recipient to follow a link or open an attachment. Often, sophisticated spear-phishing emails are used to trick users into believing a request is legitimate.

Once the malware is loaded, it uses your own system resources to attack your data. The program searches for files on the local computer and any connected systems you have access to across your network. Once located, your data is encrypted. This means you are locked out of your own files unless you have the complex “key” required to decrypt them.

Criminals then display a message on your screen demanding a Bitcoin payment in exchange for the key. These attacks often include a strict deadline—such as 48 or 96 hours—threatening that your data will be destroyed forever if you do not pay. These tactics are designed to pressure you to act before you can consult with medical IT support experts.