(a) A person is guilty of computer extortion by use of ransomware, when such person (1) introduces ransomware into any computer, computer system or computer network, and (2) demands payment of money or other consideration to remove the ransomware, restore access to the computer, computer system, computer network or data contained on such computer, computer system or computer network, or otherwise remediate the impact of the ransomware.
(b) Computer extortion by use of ransomware is a class E felony.
(c) For purposes of this section, “ransomware” means any computer contaminant or lock placed or introduced without authorization into a computer, computer system or computer network that restricts access by an authorized person to the computer, computer system, computer network, or any data held by the computer, computer system or computer network, but does not include authentication required to upgrade or access purchased content or the blocking of access to subscription content in the case of nonpayment for such access, and “computer contaminant” means any set of computer instructions that are designed to modify, damage, destroy, record or transmit data held by a computer, computer system or computer network without the intent or permission of the owner of the data.
(P.A. 17-223, S. 1.)