SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-disconnect-infected

A ransomware message appears on a PC. The FTC says to immediately do what with infected devices?

Disconnect them from the network.

Start playing free

  1. Plug in a backup drive
  2. Email the files to coworkers
  3. Disconnect them from the network ✔

Why: Ransomware can spread across shared drives and connected machines. Disconnecting the infected device slows that spread. Then report it to your IT or security contact right away.

Huh, didn't know that: The FTC also says to report the attack right away to your local FBI office.

The dad joke
If the screen says 'your files are locked', do not negotiate. Unplug the network cable and call IT.
Like this card?
Play the game

References

Answer: Disconnect them from the network. Ransomware can spread across shared drives and connected machines. Disconnecting the infected device slows that spread. Then report it to your IT or security contact right away.

  1. FTC: Cybersecurity for Small Business, Ransomware www.ftc.gov/system/files/attachments/ransomware/cybersecurity_sb_ransomware.pdf
    Immediately disconnect the infected computers or devices from your network.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhat does the FTC say makes up most ransomware attacks?Security & PrivacyWhich password habit does the FTC say should be against company policy?Security & PrivacyWhy does the FTC now say connecting through public Wi-Fi is usually safe?

That's stuff everyone should know.