A ransomware incident that encrypts hospital systems can threaten availability even if no patient data is stolen.

### Why this is right Encryption can prevent hospital staff from using systems and records needed for care. That loss of access is an availability impact, whether or not the attacker also steals information. ### The concept Availability means that authorized users can reach and use the systems or information they need. Ransomware changes files so they cannot be used normally until recovery or decryption. In a hospital, that interruption can delay medical operations. Confidentiality is a separate concern: attackers may also steal patient records, but theft is not required for availability to be harmed. ### Terms - **Ransomware**: malicious software that blocks access to data or systems, often by encrypting files. - **Encryption**: a process that transforms readable information into a form that requires the appropriate key or process to read. ### Remember A system can be unavailable even when its data has not been disclosed.