The first step is to isolate the infected system before the infection spreads.   Then, take screenshots of any ransomware message or encrypted file. Keep event logs and security alerts.  Report your cyber attack to the Canadian Centre for Cyber Security.  Contact a cybersecurity company, such as ited. We have decryption tools that can help you recover your data or help you decide whether to pay the ransom Stopping ransomware can be pretty tricky. To avoid the worst, protect yourself with a personalized cybersecurity solution for your organization. Make regular backups and updates; this will help you limit the impact of a cyber attack on your business.