"When criminals attack individual users, they often ask for small amounts of money, as they know most individuals can't or won't pay thousands of dollars to get their data back," said Randall Magiera, cybersecurity expert and professor of information technology at Tulane University.