It's unclear how MedStar has been able to restore its systems. But computer security experts closely analyze ransomware and have occasionally been able to find errors in the code that would allow the recovery of the decryption key.
Authorities are largely at a loss for how to stop ransomware. Some of the ransomware gangs, believed to be in Eastern Europe or Russia, are far out of the reach of law enforcement.
Companies and organizations have generally been advised to frequently back up their systems and ensure those systems are segregated to prevent ransomware from encrypting those files as well. But designing such systems is not easy, and small organizations with less to spend on IT may be more vulnerable.
Sign up for CIO Asia eNewsletters.