In a traditional ransomware attack, once malware gains access to a network (most often injected via email) it seeks out and encrypts critical files or systems that make essential operations impossible. This could involve key database entries containing customer or operational data or vital startup files that are necessary to boot up a device.

Source: BlackFog