Is a ransomware attack a reportable data breach?

Ransomware involves the denial of access to a user’s data; often, a hacker encrypts an organization’s data with a key known only to the hacker coupled with a demand for payment in order to provide the encryption code. Ransomware can be deployed through phishing messages, spam, websites, email attachments or direct installation by a hacker.