[eqvinox]

Actually — even better point from the post:

> If you discover that the data was corrupted during the encryption process, is it game over?

> Most of the time, yeah. If it’s database files, typically they’re gone.

I hadn't even considered what happens when ransomware tries to encrypt a database while it is in use. That's not gonna end well...

[londons_explore]

The ransomware I've come across has lots of special heuristics to try and not destroy your data... Things like taking a copy and then doing an atomic replace...

[eqvinox]

Admittedly I've only had to deal with ransomware once, trying to help a friend. That one was way too shoddily written for anything like atomic replace or DB identification heuristics…