§ 6-3-507 — Computer extortion; penalties

(a) A person is guilty of computer extortion if he
knowingly and without authorization introduces, attempts to
introduce or directs or induces another to introduce, any
ransomware into a computer, computer system or computer network
which requires the payment of money or other consideration to
remove the ransomware or repair the damage caused to the
computer, computer system or computer network by the ransomware.
(b) Computer extortion is a felony punishable by
imprisonment for not more than ten (10) years, a fine of not
more than ten thousand dollars ($10,000.00), or both.
(c) For purposes of this section:
(i) "Computer or data contaminant" means any virus,
worm or other similar computer program designed to encrypt,
modify, damage, destroy, record or transmit information within a
computer, computer system or computer network;
(ii) "Ransomware" means a computer or data
contaminant, encryption or lock that restricts an owner's access
to a computer, computer data, computer system or computer
network in any way. "Ransomware" does not include authentication
required to upgrade or access purchased content.