# Ransomware **Domain:** Cybercrime / Malware / Extortion **Doc Type:** Canonical Threat Node **Maturity:** Foundational ## Definition **Ransomware** is malicious software or an associated intrusion operation that denies access to systems or data—commonly through encryption—and demands payment or another concession. Modern campaigns may also steal data and threaten disclosure. ## Operational Context Ransomware can interrupt healthcare, education, fuel distribution, government and private-sector operations, turning information-system compromise into physical and institutional consequences. ## See Also [[wiki/Cyber Extortion|Cyber Extortion]], [[wiki/Incident Response|Incident Response]], [[wiki/Disaster Recovery|Disaster Recovery]], [[wiki/Operational Continuity|Operational Continuity]]