Explain how a ransomware attack on a hospital can affect all three CIA triad goals, and distinguish the direct effect from possible additional effects.

### Why this is right The scenario supports three distinct effects: systems become inaccessible, patient data may be stolen, and the reliability of files may be uncertain after encryption and recovery. Each maps to a different CIA goal, so the answer should not treat encryption as only one kind of harm. ### The concept Availability is the ability of authorized users to access services and data. Confidentiality is protection against disclosure to unauthorized people. Integrity is confidence that information is accurate and has not been improperly changed. Ransomware directly disrupts use by encrypting files. A double-extortion incident may add theft before encryption, creating a confidentiality risk. Recovery also needs integrity checks because restored or decrypted files may not be trustworthy. ### What a good answer covers - The service interruption and delayed care are availability effects. - Possible theft of patient records creates confidentiality risk. - Altered or uncertain files create integrity concerns. - The three impacts are different and can occur together. ### Terms - **Double-extortion ransomware**: ransomware in which attackers steal data as well as encrypting systems, creating both disclosure and access threats. ### Remember Separate access loss, information exposure, and data trustworthiness when analyzing ransomware.