India: Ransomware without data theft may trigger mandatory reporting

In India, a ransomware attack that locks a company’s systems may be considered a personal data breach even without file theft.