Investigators search for source of ransomware attack on AIIMS servers
System yet to be fully restored as more damage is anticipated if it is linked to the Internet; attackers changed file extensions for all physical servers; over 11,000 computers to be scanned