I'm not the best person to answer this since I'm not very smart, I recommend you ask others for advice as well. However, here is what I would do:

I would immediately notify our customers of the outbreak, and follow our pre-planned ransomware strategy to mitigate damage and resume business as fast as possible. Presumably we have such a strategy, and presumably we also have backups: I would have all our services wiped and replaced with the backups, and implement close monitoring and inspections for the next few weeks to ensure the hackers are completely gone and there is no remaining ransomware or spyware.

If there is no pre-planned strategy for a ransomware attack and we have no backups: first I would scold our IT (gently) because they idiots (figuratively), and then I would actually pay the ransom because otherwise we're obviously screwed. If we have no backups *and* the ransom is too much or the attackers trick us, I will have the entire company work to scrub the virus and replace missing data as much as possible, but unfortunately in this case I wouldn't be suprised if the entire business collapses.

The reason I would absolutely notify our customers and be as open as possible is because it's extremely unlikely we'd be able to keep this attack under the radar. In the past years, we've seen many companies affected by hackers, and every public case where they did not immediately disclose has seriously hurt their profits and reputation. Of course, we only see the *public* cases, not the ones they successfully hide; but given the scale of the attack and the fact that the hackers could at any time disclose (with proof) themselves—*the people who hurt us by hacking our business, could hurt us more if we keep this private*—I really think that being as open as possible is important, not just to our customers, but to our own success.

---

Again, I want to remind you that I'm not the smartest, so it may be good advice to ask outsiders, especially if they are more experienced with ransomware attacks. Let me know if you want any further advice.
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence