The Supreme Court of Ohio recently ruled that a ransomware attack on a medical billing company failed to cause direct physical damage to the company's computer software as required under its business owners policy. Prior to this ruling, a ransomware attack on a business computer system and resultant claim under an all-risk commercial property insurance policy had not been addressed in Ohio.