An Act amending Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes, in computer offenses, providing for the offense of ransomware; and imposing duties on the Office of Administration.

SB 415 creates new criminal penalties for ransomware attacks targeting Pennsylvania state government systems. It prohibits possessing, using, or threatening to use ransomware (defined as software blocking access or encrypting data for payment demands) with penalties ranging from misdemeanors to felonies based on the ransom amount ($10,000+ triggers felony charges). The law requires managed IT service providers to notify state agencies within one hour of detecting ransomware, and agencies to report attacks to police within two hours. These provisions aim to prevent, detect, and respond to cyberattacks on Commonwealth agencies while mandating public notification after incidents.