The US state of Maryland wants to punish ransomware attacks more heavily. Policy makers have drafted a bill for this.
At the moment, attacks with ransomware that cause less than $ 10,000 damage are considered offense, while attacks with a damage item of more than $ 10,000 are considered criminal.
Attacks with a damage item of more than $ 10,000 are considered criminal
The new legislation would label attacks that involve more than $ 1,000 damage as a crime, with a fine of up to $ 100,000 and a maximum prison sentence of 10 years. The possession of ransomware with the intention to use it is also made punishable. However, an exception will be made for researchers.
Furthermore, the court can award victims compensation and it becomes possible for victims to get lawyer fees refunded