A famous cyber security expert once quipped: “Computer security is hard.” He’s right. Unfortunately, while you have to be right every time, the criminal only needs to be right once. Ransomware is but one of a long line of hacking techniques that have been used to infect millions of systems and cost billions of dollars in damage. Essentially, ransomware is malware that encrypts all of the files on a computer system – rendering your computer system useless. Normally, the files affected are on laptops, desktops, servers, and (in many cases) network-connected backup machines. The perpetrator will then notify you that s/he holds the private key necessary to decrypt your files, but will only provide that key if you pay a ransom, typically in Bitcoin. I won’t mince words. Ransomware is one of the ugliest infections you’re ever likely to encounter as a practicing attorney. The first purpose of this article is (to attempt) to help you avoid a ransomware attack in the first place. The second purpose of this article is to help you decide what to do if you suffer a ransomware attack. The third purpose of this article is to help you deal with the aftermath of such an attack. In each section of this article, there will be links to online resources. Keep in mind that most court opinions which have addressed ransomware attacks have centered around evidentiary issues, and those arguing that “ransomware-ate-my-brief” have garnered a few success and far more denials of relief. Now I know that you’ve heard about ransomware attacks, and think they only hit hospitals and larger companies. Unfortunately, that is no longer the case as roughly 41% of current ransomware cases are not related to the healthcare industry. As with any malware that is bought and sold openly on the Dark Web, the cost of ransomware software goes down the longer that it is in circulation. That means, from a cost-of-entry standpoint, that smaller companies (like law firms) become economically feasible targets. One expert put it this way: “It’s often assumed that ransomware mainly affects governments and major corporations because it’s those incidents that make the news,” said Brett Callow, a ransomware analyst at Emsisoft. “The reality, however, is that more than half of all ransomware victims are small businesses and individuals. And, unfortunately, they are usually not as well prepared to deal with the problem as larger organizations and probably feel more pain as a result.”