Ransomware Awareness: What You Need to Know

By Kevin Novak, Chief Information Security Officer at Old National Bank

Ransomware is one of the most disruptive and costly forms of cybercrime today. It’s a type of malicious software that locks or encrypts your files and demands payment to restore access.

At Old National, we take cybersecurity seriously. Our systems are designed to detect and prevent ransomware threats. Here’s how you can protect yourself:

1. Plan Ahead

   • Make sure you have immutable backups of critical systems and data
   • Establish key relationships in advance (legal, insurance, incident response, forensics)
   • Establish and test ransomware response plans

2. Avoid Suspicious Links and Attachments

   • Don’t open attachments from unknown senders
   • Hover over links to preview the URL
   • Use email filters

3. Backup Your Data Regularly

   • Use a multi-destination approach to backups
   • Use a detached destination (cloud or external drives) as one destination
   • Schedule automatic backups
   • Keep backups disconnected when not in use
   • Test backups frequently

4. Keep Software and Security Tools Updated

   • Enable automatic updates
   • Use reputable antivirus/antimalware tools
   • Be aware of all installed browser extensions

5. Use Strong Passwords and Multi-Factor Authentication

   • Use complex passwords
   • Avoid reusing passwords
   • Enable MFA

6. What to Do if You’re Hit by Ransomware

   • Disconnect from the internet
   • Do not pay the ransom
   • Contact professionals (external counsel, cyber insurance, digital forensics and incident response, ransom negotiators, law enforcement (local PD/FBI)). Report to ic3.gov.
   • Contact critical partners and service providers such as Old National
   • Assess backups and execute recovery plans

Final Thoughts

Ransomware is a serious threat — but it’s one that can be avoided and prepared for. At Old National, we use layered security controls to protect our systems and clients.