Government

Industry

NC City Payment System Compromised After July Attack

July 2, 2024

City of Apex leaders on Thursday said that the hack that knocked the town network offline was an attempted ransomware attack, but the town has yet to get any demands. Since July 2, residents have been unable to pay bills or apply for permits electronically. Emergency services like 911 remained online. “At no time did any life safety services cease to operate,” Galloway said.
In September the town of Apex addresses resident concerns about unusually high utility bills – reportedly up to $1800

read more

Recovery Cost from Ransomware Attack Cost City of Hamilton Nearly $10M

February 12, 2024

City of Hamilton has spent nearly $10 million recovering from a cyberattack on its municipal IT network, according to a new report to council (November 2024). Hamilton did not pay the “huge” ransom demanded by the hackers. The February ’24 ransomware attack affected 228 different internet technology applications, disabling municipal services like phone lines, electronic payments, computer-aided fire dispatch and online permits — but to date, the city believes no resident personal information was stolen. The city’s multimillion-dollar system of traffic cameras was disconnected by the cyberattack. The lost application means any time the city wants to change a traffic-light signal timing, a worker needs to physically visit the individual intersection to “manually make the change.” Some services were deemed “unrecoverable” and the city has still not recovered.

read more

Cyberattack on Municipal Waste Disposal Company in Germany

May 1, 2024

The waste management company (AWG) in Bassum was unreachable by phone for two weeks at the beginning of May. The company has now announced that this was due to a cyber attack. The disruption meant that all of the company’s landlines were unavailable, and bulky waste could no longer be registered online. No customer data was at risk.

In order to resolve the problem, AWG called in a crisis team and took the entire company offline.

read more

Cyberattack on European Astronomical Research Institution

May 1, 2024

Starting on Friday 17 May, several of ESO’s network and communication services were shut down to allow for an important software upgrade to be deployed. The upgrade is being done in response to a cyber security incident. In addition to the shutdown, mitigating this threat included limiting communications regarding the incident to avoid compromising ESO’s cyber security response plan. 

As of Tuesday 21 May, email services have been restored and the ESO website is back online. Other services, such as the ESO and ALMA Science Archives, are expected to be restored in the coming days. 

ESO’s IT team is working together with a cyber security consultant on detecting and clearing malicious software from all ESO’s machines, as well as on investigating the attack and its consequences. ESO observations have not been affected since our observatories run largely on separate networks. ELT construction remains unaffected.

read more

Data Breach at German Waste Disposal Company

July 13, 2024

The waste disposal company MERB in Achern suffered a cyber attack over the weekend. It is currently unclear how much data was lost in the attack. The garbage collection service was not affected by the attack,

read more

City of Columbus Hackers Leak over 3TB Data

July 18, 2024

A July ransomware attack on the city of Columbus, Ohio, has exposed the personal information of approximately 500,000 residents, marking one of the most substantial cyber incidents involving a U.S. city.

The attack, attributed to the Rhysida ransomware group, has drawn attention due to both the extent of the data stolen and the controversial response from city officials.

read more

Rhysida Demands $1.9M from Ohio State Government for Sensitive Exfiltrated Data

July 18, 2024

The government of Columbus, Ohio shut down a large part of its IT systems for >10 days after ransomware attack. The Rhysida ransomware group claimed the attack and is threatening to leak 6.5 terabytes of exfiltrated information. The data allegedly contains emergency services data, access to city cameras and more.

Government email access has been restored after more than a week of outages. 911 as well as 311 have been able to remain operational throughout the recovery process. The city’s department of technology and outside experts are going through each technology system before they are brought back online.

Rhysida demand ransom of 30 BTC — about $1.9 million.

read more

Government Services Disrupted in Kentucky

July 29, 2024

Jefferson County, Kentucky is dealing with a cybersecurity incident disabling services and closing government offices. All eight branches of the Jefferson County Clerk’s Office in Louisville, Kentucky, remain closed after a ransomware attack on Monday.

The clerk’s office, responsible for issuing vehicle and voter registrations, professional licenses and housing deeds, told Spectrum News 1, which first reported the cyberattack, its data appears not to have been compromised. Its website was inaccessible on Wednesday.

read more

Wichita City Ransomware Attack Shuts Down Services

May 3, 2024

The cyberattack at the city of Wichita, Kansas water system targeted water metering, billing and payment processing. All water systems are secure. Other Wichita’s services were also affected and off line.

Hackers copied files from the city’s network, and the city shut down many online services, buying time to minimize the damage. Wichita will temporarily lean on paper records and performing more administrative chores by hand. The City will not shut off any water accounts.

read more

Large Scale Data Breach Disrupts >200 Indonesian Government Agencies

June 20, 2024

On June 20th, one of the temporary National Data Centers suffered a cyberattack that encrypted the government’s servers and disrupted immigration services, passport control, issuing of event permits, and other online services. The government confirmed that a new ransomware operation, Brain Cipher, was behind the attack, disrupting over 200 government agencies.

The Ministry of Communication and Information Semuel Abrijani Pangerapan said “Regarding security, we have succeeded in carrying out quarantine or isolation in the affected areas.”

read more