See "Set Data Bomb," SR5, p.242. When you set a Data Bomb in a file, you roll a Software + Logic [Sleaze] vs. (Device Rating x 2) Opposed Test. If you're successful, you set the Data Bomb with a rating up to the number of your net hits (it can be lower, if you want). When some hapless hacker tries to access the file without first finding and disarming the Data Bomb (see "Disarm Data Bomb," p.239), they take (Rating)D6 Matrix Damage. This is one of those very rare instances in Shadowrun where you roll dice and add them together. The point of a Data Bomb, after all, is to blast the unauthorized user out of the Matrix, which isn't likely if it were limited to just (Rating) damage.