Ransomware is a type of software that encrypts data on a computer so that the owner of the computer can no longer use it without paying the attacker. This can be done to a personal computer like a laptop, or it can be done to hundreds of servers, bringing an organization’s operation to a screeching halt. Hackers use this type of software to attack organizations and hold data for ransom (as the name ransomware implies). Institutions of higher education are major targets for these types of attacks. There are now multiple groups who have been using the Ransomware as a Service (RaaS) business model, allowing businesses, governments, and institutions to be attacked at an ever-increasing rate. This creates an enormous privacy risk for organizations. If data is not properly encrypted in storage and a ransomware attack occurs, the organization’s data may be stolen and sold if it cannot meet the ransom demand. Thus, divulging any data affected by the attack.