“We Backed Up Everything Two Weeks Before, More By Luck Than Planning”: The One Habit That Turns Disaster Into Inconvenience

For Adults 35–50 (Parents and Non-Parents Alike)

There’s a particular kind of dread that comes with opening a laptop to find every file renamed, every folder locked, and a message demanding payment to get any of it back. Ransomware doesn’t discriminate by household income or job title — it discriminates by whether a backup existed before the attack, full stop. That’s really the whole story, condensed.

What’s shifted in the last couple of years is speed. Attacks that used to give defenders days or weeks between an initial intrusion and actual damage can now complete in a fraction of that time, because a lot of the manual work — finding valuable files, encrypting them, even drafting the ransom message — has been automated. The old advice to “just notice something’s wrong and unplug the computer” assumes a window of time that’s shrinking fast.

This three-minute explainer covers the mechanics clearly, without the panic, but with great performance: Ransomware Explained in Under 3 Minutes

Here’s the version that actually sticks: think of ransomware like a house fire. You can’t out-argue a fire once it’s burning, and you generally can’t negotiate your way to getting your photo albums back once they’re ash. What actually saves people isn’t cleverness in the moment — it’s the fireproof box they set up months earlier and mostly forgot about. Backups are that box. They don’t prevent the fire. They just make the fire not matter nearly as much.

Steps worth actually scheduling, not just intending:

1.          Back up your important files to a drive that is not permanently connected to your computer, or to a cloud service with version history — the “not permanently connected” part matters, since ransomware can encrypt anything it can reach, including a backup drive left plugged in.

2.          Test the backup occasionally by actually opening a file from it. A backup nobody’s checked in a year is a hope, not a plan.

3.          Be skeptical of unexpected attachments and links even from people you know, since a compromised contact’s account is often the delivery method, not a stranger’s.

4.          If it happens anyway, disconnect the device from the internet immediately and contact a professional or your local FBI field office before doing anything else — including, notably, before paying, since payment doesn’t reliably guarantee your data comes back or stays private.

The single most protective thing you can do here isn’t a clever trick. It’s the boring, unglamorous habit of a backup running quietly in the background, doing nothing dramatic — right up until the one day it does everything. Think of it like this, sometimes there's great virtue in being boring. That could be the deed to save the day!

___________________________________________________________________

This post is part of a series inspired by and meant to complement AI Safety for the Everyday User (In 10 Easy Steps) by Terrence “TerrenceTech” Williams — a plain-language guide covering sixteen classic scams and the ten concrete habits that stop them. The full book goes deeper into the “why” behind each one and lays out a complete, step-by-step action plan.