Ransomware Defense

Which norms underlie a ransomware case?

Two: extortion — Article 181, and unauthorized access to a computer system — Article 284. Each has its own elements and its own penalties.

What penalty applies to extortion?

For the basic composition — a fine or imprisonment from two to four years; committed by a group, more than once, or with the purpose of obtaining property in a large amount — from four to seven years; by an organized group or by a person convicted twice or more for unlawful appropriation or extortion — from six to nine years.

What penalty applies to unauthorized access to a computer system?

Basic composition — a fine, corrective labor up to two years, or imprisonment up to two years; with aggravating features — from two to five years; against a critical information system subject — from three to six years.

What is significant damage?

Under this chapter, damage exceeding 2000 GEL, except for a case provided for by another norm of the Code. The prosecution establishes and documents the amount.

Can a legal entity be held liable?

Under Article 284 — yes: it is punished by a fine, by deprivation of the right to carry out activity, or by liquidation and a fine.

4 min·10 Jan 2026

Ransomware and Cyber Extortion — Two Norms in One Case

Ransomware — the encryption of data coupled with a demand for payment — is legally not one crime at all. It is a combination of two independent criminal norms whose joint application fits precisely such scenarios in the Criminal Code of Georgia: the demand of extortion is prohibited by Article 181, while unauthorized access to a computer system is prohibited by Article 284. That is why a case of this kind must be read through both norms separately: each has its own elements and its own penalties, and it is in exactly those details that the opportunities of the defense are hidden.

Updated: 10 Oct 2026

Legal basis:

საქართველოს სისხლის სამართლის კოდექსი

Ransomware Defense

Which norms underlie a ransomware case?

Two: extortion — Article 181, and unauthorized access to a computer system — Article 284. Each has its own elements and its own penalties.

What penalty applies to extortion?

What penalty applies to unauthorized access to a computer system?

What is significant damage?

Under this chapter, damage exceeding 2000 GEL, except for a case provided for by another norm of the Code. The prosecution establishes and documents the amount.

Can a legal entity be held liable?

Under Article 284 — yes: it is punished by a fine, by deprivation of the right to carry out activity, or by liquidation and a fine.

4 min·10 Jan 2026

Ransomware and Cyber Extortion — Two Norms in One Case