Episode 5: Ransomware, Explained Without the Jargon

Ransomware rarely hits in one bad click. It's closer to a burglary that takes weeks, and every one of those weeks is a chance to stop it. Jason Russell follows a made-up Central Florida dental practice through a realistic attack, from one stolen password to a locked office on a Monday morning, then shows what would have changed the ending.

Along the way: why attackers mostly log in instead of breaking in, why the ransom usually isn't the biggest bill, and what paying actually buys you.

In this episode

• The four stages of an attack. Get in, look around, take, lock, and why 79% of attacks in Sophos's 2026 survey started with someone's login.
• The forgotten door. Among victims whose attack began with a stolen password, 97% had MFA turned on somewhere. Somewhere is the problem.
• What it really costs. Median recovery cost was $375,000 before any ransom, and the average recovery took three weeks.
• The HIPAA angle. Why HHS presumes ransomware on patient data is a reportable breach, and what that means for medical and dental practices.
• Should you pay? Why the FBI says no, and what law enforcement found when it took down LockBit.
• What actually stops it. MFA on every login, someone watching around the clock, backups that can't be deleted, and a plan on paper.

Your one thing this week: list every way someone can log in to your business from the outside, and find out which ones don't have MFA.

Chapters

• 0:00 Intro
• 0:10 A Monday morning at a dental practice
• 1:06 Ransomware in plain English
• 2:00 Too small to be a target?
• 2:37 How an attack unfolds
• 5:30 What it really costs
• 7:14 Should you pay?
• 8:12 What actually stops it
• 11:27 The same story, done right
• 12:18 Your one thing this week
• 12:49 How to reach Jason

Mentioned in this episode

• Episode 1: How to Answer Cyber Insurance Renewal Questions Without Voiding Your Policy
• Episode 4: Don't Make It Easy for Them (10 Cybersecurity Moves for Small Businesses)

Sources

• Sophos, The State of Ransomware 2026
• Coveware by Veeam, Q2 2026 Quarterly Report
• Verizon, 2026 Data Breach Investigations Report
• FBI, Ransomware
• HHS, Fact Sheet: Ransomware and HIPAA
• FBI Internet Crime Complaint Center (report an attack)

Want a second set of eyes on your login list?

Email Jason directly at jason@harmony-msp.com. Send him the list, and he'll help you find the doors you forgot about.

Harmony MSP provides managed IT and cybersecurity for small businesses, medical and dental practices, law firms, and accounting firms across Central Florida. harmony-msp.com