Protecting a small business from ransomware means making it harder for attackers to get in, limiting what they can reach, and keeping recovery copies they cannot encrypt through the live network. Keep software current, use phishing-resistant multifactor authentication where available, restrict access, maintain offline encrypted backups, and prepare a response plan. If you suspect an attack, isolate affected devices and contact qualified responders before attempting recovery.
Reduce the chance of an attack
Know what you need to protect
Start with an inventory of business devices, software, accounts, and important data. Identify which systems keep the business running and the services they depend on. This helps you prioritize updates, access controls, backups, and recovery decisions. CISA’s #StopRansomware Guide recommends identifying critical systems and planning how to protect and restore them.
As an Amazon Associate I earn from qualifying purchases.
Update systems and limit account access
Install current operating-system and software updates consistently. Enable multifactor authentication (MFA) for important services, especially email, VPNs, and accounts that can access critical systems. Where supported, choose phishing-resistant MFA, as CISA recommends. Give each employee only the access their role requires, and avoid using administrator privileges for routine work.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesTrain employees to spot and report suspicious requests
Teach staff that convincing messages can still be phishing attempts. Include unexpected links or attachments and requests to change payment or account details in training. Make it easy to report suspicious messages, and keep an incident contact sheet somewhere staff can reach if email or shared drives are unavailable. The FTC’s small-business cybersecurity guidance emphasizes keeping systems updated and training employees.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Build backups that ransomware cannot easily reach
Keep critical backups offline or otherwise inaccessible through ordinary network credentials, encrypt them, and protect backup accounts with separate credentials. Schedule backups according to how much recent work the business can afford to lose. A successful backup job does not prove that you can recover: test restoring data and systems as part of a disaster-recovery plan. CISA recommends offline, encrypted backups and regular testing; the FTC likewise advises separating backup storage from the network and using separate credentials.
An external hard drive can provide one offline copy: disconnect it from the network after backup, encrypt it where possible, and control who can access it. Treat it as one part of a backup plan, not the whole plan. A portable drive can fail, be lost, or be unavailable when needed, so plan for more than one reliable recovery copy and test that each can be restored. Neither CISA nor the FTC endorses a particular drive model. See the FTC’s ransomware guidance for small businesses.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Prepare a response plan before you need one
Write down who can make decisions, who handles IT and security, how employees should report a suspected incident, and how the business will communicate if normal systems are unavailable. Include contact details for any managed IT or security provider, cyber insurer, leadership, and legal counsel. Plan an out-of-band way to communicate; attackers may monitor compromised systems. Rehearse the plan so staff know what to do under pressure. CISA’s guide and the FTC’s small-business guidance both recommend planning and preparation.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →What to do if ransomware is suspected
- Use the response plan and alert the right people. Contact internal IT or your contracted IT/security provider, business leadership, and insurer as appropriate. Use a separate communication channel if you can.
- Isolate affected systems promptly. Disconnect impacted devices from wired and wireless networks. If several systems or network segments appear affected, taking the network offline may be necessary. Follow CISA’s response checklist and coordinate containment where possible.
- Preserve evidence when feasible. Keep relevant logs and avoid actions that could destroy useful forensic information. CISA advises capturing system images and memory when initial mitigation is not possible; coordinate with qualified responders before taking steps that could affect evidence.
- Report the incident and check applicable obligations. CISA identifies its own reporting channels, the local FBI field office, the FBI Internet Crime Complaint Center (IC3), and the local U.S. Secret Service field office as possible sources of assistance. The right reporting and notification duties depend on the facts and applicable law. The U.S.-focused guidance cited here does not establish requirements for every business or jurisdiction; businesses elsewhere should consult local authorities and local breach-notification rules.
- Contain, clean, and recover with qualified help. Responders can help secure accounts that may still be exposed, rebuild or clean systems, and restore from known-clean backups in priority order. Do not reconnect compromised systems simply because files appear accessible.
Decide carefully about ransom and restore safely
The FTC says law-enforcement agencies do not recommend paying, and payment does not guarantee that attackers will restore files. The decision depends on the risks and costs facing the particular business. Involve qualified incident responders, your insurer, counsel, and law enforcement as appropriate rather than assuming payment will—or will not—solve the problem. The FTC’s advice is in its small-business ransomware guidance.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
After containment, restore from trusted offline backups in an order that prioritizes critical business services. Confirm systems are clean before reconnecting them. Document what happened, identify what needs to change, and update the response plan and staff training. CISA’s guide recommends recording lessons learned and refining policies and exercises after an incident.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Sources and scope
This article draws on U.S. guidance from CISA and the FTC. CISA’s #StopRansomware Guide is listed with a revision date of October 19, 2023; the FTC small-business ransomware pages date from 2018 and 2020. Government contacts, software capabilities, and legal requirements can change, so verify current details with the relevant authorities and qualified advisers.
Quick Recap
Best Value
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
