What really happens during a ransomware attack?

In this powerful episode of And Security For All, host Kim Hakim sits down with Zach Lewis, CIO & CISO at the University of Health Sciences and Pharmacy in St. Louis, to break down the real-world story behind his new book Locked Up — a firsthand account of surviving a major ransomware incident.

From negotiating with the notorious LockBit ransomware group to navigating board-level decisions about paying (or not paying) a ransom, Zach shares what most organizations never talk about publicly.

🔐 In this episode, we cover:

• What actually happens during a ransomware attack (pre, during & post-breach)
• How ransomware groups like LockBit operate as “ransomware-as-a-service”
• Why some organizations pay — and what happens after they do
• Double extortion & the evolving tactics of cybercriminals
• AI-powered phishing, deepfakes, and the new threat landscape
• How boards are responding to growing cyber risk
• Practical advice for small and mid-sized organizations with limited security budgets
• Lessons learned from real breach recovery

With ransomware, AI-driven attacks, and data extortion on the rise in 2026, this conversation is essential listening for CISOs, IT leaders, board members, business owners, and anyone responsible for protecting sensitive data.

🎧 Whether you're in healthcare, education, finance, or enterprise security — this episode delivers actionable insight from someone who’s lived through it.