Ransomware virus a difficult blow to Okotoks gallery

An Okotoks art gallery was dealt a crippling blow by a ransomware virus, resulting in the loss of important computer files and its archive of images by award-winning artist Bernie Brown.

Boot Hill Galley owner Carol Bishop said it has had a far-reaching impact on her business, locking out the gallery's computers and back-up files.

“I just want people to be really careful to make sure that you know what you're opening because this has really put a pickle in everything and the amount of money that it's going to cost us to get back on track is a hit that we really can't afford right now,” she said.

Ransomware is a malicious software that infects a computer and restricts access until a ransom is paid to unlock it. People can unknowingly download it by clicking on links on websites, pop-up windows or downloading files from their emails.

It all happened innocently enough when Bishop opened an email attachment she thought was an invoice.

“It looked like a legit invoice, we get invoices all the time sent to us,” she said.

When Bishop logged on to her computers just after 9 a.m. on April 20, a message on her screen said her files had all been encrypted. A note demanded a ransom in exchange for a code to unlock her system. Bishop said the ransom demand worked out to about $480 Canadian.

“We've been told not to pay it because there's no guarantee we'll get the files back,” she said.

Bishop said the ransomware virus targeted her entire computer system, including the gallery's website, tax files and her backup files. Scanned images of Bernie Brown's artwork on the store's networks are also unrecoverable.

“Everything, and it's all gone,” said Bishop.

There are hardcopy prints of Brown's artwork in the store's inventory and Bishop said she has a few images save on a computer offsite. She has also been in contact with Brown and said he has some images saved.

Bishop said the files were used to make calendars and to print on items available for sale in the store and online.

“We do have hardcopies of actual prints, but some people will request these prints be sent so they can be used as logos on stuff, but all of our stuff is gone,” she said.

Bishop said she also doesn't know at this point whether scanning the images in the store's inventory will be adequate quality to replace the images lost.

She said she will have to replace her computers and input files back into the system all over again, though she isn't sure yet what her insurance will cover.

Bishop said she was aware about ransomware and she is cautious about what she opens on her computer, but there was no indication of what the email actually was.

She said she doesn't want to see anyone else have to go through a similar situation and urged people to be careful when opening emails from sources they don't know.

For more information about ransomware and tips to protect yourself, visit www.publicsafety.gc.ca/cnt/rsrcs/cybr-ctr/2013/in13-004-en.aspx