Bill > SB726

This bill amends Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes to create a new subchapter on ransomware. The key provisions include: (1) prohibiting the possession, use, sale, or transfer of ransomware, as well as threats to use ransomware, with certain exceptions for authorized research; (2) establishing sentencing guidelines for ransomware offenses based on the amount of money or consideration involved; (3) allowing for the forfeiture of any computer, software, or data used in the commission of a ransomware offense; (4) requiring managed service providers and Commonwealth agencies to promptly notify authorities of ransomware incidents; (5) generally prohibiting the use of public funds to pay ransomware demands, with exceptions for emergencies and insurance coverage; and (6) requiring the Office of Administration to study and report on the Commonwealth's preparedness and response to ransomware attacks.