What to Prepare Before Contacting a Ransomware Recovery Company

Ransomware recovery cannot be priced from a single statement that files were encrypted. This article explains the five types of materials usually needed before assessment and quotation: the original ransom note, a few small non-sensitive encrypted samples with unencrypted counterparts, the affected asset and database environment, backup and snapshot status, actions already taken after the incident, and how to sample without causing secondary damage or leaking sensitive data.