An "internal state of emergency" was declared when Locky ransomware began spreading from one computer to another across a Kentucky hospital's network.
The ransomware caused the hospital staff to use paper records for five days while one-by-one all the computers were checked, disinfected and cleared. Officials said they resolved the emergency after five days without giving in to the ransom demand.
This incident serves as a warning that special measures are needed to protect computers, servers, external drives and NAS drives from ransomware that can jump from machine to machine. Files on each machine, including backups, can be encrypted and held for ransom.