6-3-507. Computer extortion; penalties.
(a) A person is guilty of computer extortion if he knowingly and without authorization introduces, attempts to introduce or directs or induces another to introduce, any ransomware into a computer, computer system or computer network which requires the payment of money or other consideration to remove the ransomware or repair the damage caused to the computer, computer system or computer network by the ransomware.
(b) Computer extortion is a felony punishable by imprisonment for not more than ten (10) years, a fine of not more than ten thousand dollars ($10,000.00), or both.
(c) For purposes of this section:
(i) "Computer or data contaminant" means any virus, worm or other similar computer program designed to encrypt, modify, damage, destroy, record or transmit information within a computer, computer system or computer network;
(ii) "Ransomware" means a computer or data contaminant, encryption or lock that restricts an owner's access to a computer, computer data, computer system or computer network in any way. "Ransomware" does not include authentication required to upgrade or access purchased content.