County computers still down 1 week after ransomware attack
Associated Press | Hagadone News Network | UPDATED 5 years, 10 months AGO
SALEM, Ore. (AP) — One week after an Oregon county was hit by a cyberattack, the county computers remain unplugged while a cybersecurity firm tries to negotiate with criminals who deployed the ransomware, a county official said Wednesday.
Tillamook County Sheriff's Lt. Gordon McCraw, who is the county emergency manager, said the outage is creating the most havoc for the taxation and clerk's offices in the coastal county, which are more reliant on computers.
“Department heads are of course unhappy that they can't do things the way they used to,” McCraw said in a telephone interview.
Customers have been checking out books from county libraries the old fashioned way, with paper and pen, instead of scanning them, McCraw said.
It's not clear if a ransom demand has been made, but McCraw said the county needs an encryption key to access all the data that the criminals encrypted. A study determined that it would take 12 years to decrypt all the data without the key.
Ransomware is malicious software that encrypts a system, effectively locking out its users. The attackers promise to decrypt the information with a decryption key if they are paid.
The county reported the attack to its cyber insurance carrier. Arete Advisors, a cybersecurity company based in New York, has been engaged to oversee an investigation and coordinate with law enforcement and "is negotiating with whoever encrypted our filed,” McCraw said.
It was not clear if a ransom demand has been made, or if Arete has established contact with the criminals. The company did not immediately respond to a request for information.
The city government said in a statement on Jan. 22, the day of the attack, that its phones and some emails and computers were still offline, affecting all departments, including city hall, the library, public works and police. Emergency 911 phone number and non-emergency dispatch lines were unaffected. The phones were affected because they are so-called VoIP devices meaning they use the internet.
In 2019, 113 state and municipal governments and agencies, 764 healthcare providers, and 89 universities, colleges and school districts in the United States were hit by ransomware attacks, said Brett Callow, threat analyst at Emsisoft, a company that produces software to protect computers against attacks. The numbers came from a compilation of press reports and help requests the company received, Callow said.
___
Follow Andrew Selsky on Twitter at https://twitter.com/andrewselsky
ARTICLES BY ASSOCIATED PRESS
Hong Kong police arrest 4 from university student union
HONG KONG (AP) — Four members of a Hong Kong university student union were arrested Wednesday for allegedly advocating terrorism by paying tribute to a person who stabbed a police officer and then killed himself, police said.
For South Sudan mothers, COVID-19 shook a fragile foundation
JUBA, South Sudan (AP) — Paska Itwari Beda knows hunger all too well. The young mother of five children — all of them under age 10 — sometimes survives on one bowl of porridge a day, and her entire family is lucky to scrape together a single daily meal, even with much of the money Beda makes cleaning offices going toward food. She goes to bed hungry in hopes her children won’t have to work or beg like many others in South Sudan, a country only a decade old and already ripped apart by civil war.
For South Sudan mothers, COVID-19 shook a fragile foundation
JUBA, South Sudan (AP) — Paska Itwari Beda knows hunger all too well. The young mother of five children — all of them under age 10 — sometimes survives on one bowl of porridge a day, and her entire family is lucky to scrape together a single daily meal, even with much of the money Beda makes cleaning offices going toward food. She goes to bed hungry in hopes her children won’t have to work or beg like many others in South Sudan, a country only a decade old and already ripped apart by civil war.