IT department to be questioned about ransomware attack