Ransomware at a Small Office, in Plain English
Last verified: October 2026
Ransomware locks up your files and demands money — but a small office can survive it. Here are the decisions before, during, and after an attack, starting with the offline tested backup that beats it. Want to get ready? My number is (330) 200-8042.
Ransomware, at a Glance
Ransomware scrambles your files and demands payment to unlock them — and it can freeze a small office cold. But the outcome is mostly decided before the attack: a backup you keep offline or immutable and have actually tested lets you say no and rebuild. If you're hit, isolate the machines (leave them on), call your cyber-insurer's hotline first, and don't rush to pay — payment doesn't guarantee recovery and can be legally risky. This guide covers the decisions before, during, and after, plus free FBI and CISA help and Ohio's public-body ransom rule. There's a printable 29-page version up top.
Common Questions
1 What's the single best protection against ransomware?
An offline or immutable backup that you've tested. If you have clean copies of your files, you don't need the attacker's key — you can wipe and restore. A backup that's always connected gets encrypted too, so keep one disconnected or in immutable cloud storage.
2 Should we pay the ransom?
Only as a last resort, and never alone or in a panic. Payment doesn't guarantee a working key, marks you as a payer, funds more crime, and can carry legal and sanctions risk. Involve your insurer, law enforcement, and a lawyer — and with a clean backup you often won't need to.
3 What do we do the moment we're hit?
Stay calm, isolate the affected machines from the network (leave them on), photograph the ransom note, start a log, and call your cyber-insurer's hotline first. Don't power off, don't wipe, and don't reply to the attackers yet.
4 Are small offices really targeted?
Yes. Most ransomware spreads through automated attacks that hit whoever has an open door, regardless of size. Small offices often have fewer defenses, which makes them easier — not safer — targets.
5 Is there free help if we're attacked?
Yes. Report the crime to the FBI's IC3 at ic3.gov, and use CISA's StopRansomware.gov for guidance and, for some strains, free decryption tools. Ohio public bodies can also lean on CyberOhio.
6 Do public bodies have special rules?
Yes. Under Ohio law a political subdivision generally cannot pay a ransom unless its legislative authority formally votes to approve it, and must report incidents within 7 days to Ohio Homeland Security and 30 days to the Auditor of State. See our public-body guide.
Would You Rather I Just Help?
Beating ransomware is mostly about the boring prep — and that's exactly what I do. I'll get your backups offline and tested, turn on MFA everywhere, and help you write a one-page plan, so an attack is a bad week instead of the end. And if you're hit right now, call me and I'll help you work the right steps. $99 flat for a visit, $49 for remote help, 30-day come-back-free. I'm a tech helper, not a lawyer — for the legal calls I'll help you line up the right professional.
Would you rather I just do this for you?
No shame in it — plenty of folks would rather hand it off, and that's what I'm here for. I'll come to your home, set it up right, and make sure it's working before I leave. Flat $99 per visit — no jargon, no upsell, and every visit is 30-day come-back-free.
Not a hardware job? I can often fix it remotely for $49 — a secure screen-share, up to 2 hours, that you watch the whole time and can end whenever (included free for $39/mo Support Plan members, and it counts toward the $99 if it turns out I need to come out).