Local Municipalities: It’s Time to Get Serious about Ransomware Attacks

The New York Times recently reported that over 40 municipalities have fallen victim to cybersecurity attacks just this year. One in four local governments will eventually fall victim to ransomware. Ransomware attacks have hit 48 states and the District of Columbia since 2013.

These facts are astounding and not something that should be taken lightly.

Ransomware—when an attacker locks a victim’s files, data, or systems and demands payment in exchange for their release—is one of the top hacks used by cybercriminals. In the case of a municipality, a ransomware attack typically strips them of the ability to function and deliver crucial services to their residents, causing chaos and resulting in financial devastation. In the past few years, ransomware attacks have gotten far more sophisticated and targeted, growing in both frequency and strength, affecting a slew of cities across the United States. Atlanta, Baltimore, and a whole group of towns in Texas are just a few of the places that have been targeted and devastated by ransomware. Historically, local government offices and agencies have understaffed IT departments as well as limited budgets and access to sensitive data, making them extremely vulnerable to attack.

The implications of a ransomware attack can be detrimental to a municipality and can have a ripple effect for years or longer. First off, a ransomware attack can be financially crippling. For example, a recent attack in Baltimore cost the city over $18 million in emergency spending and revenue loss, and the city didn’t even pay the ransom. Oftentimes, local government budgets are stretched thin, and an attack will take away budget from an area that needs it, such as education, welfare programs, or healthcare.

Furthermore, Governments are privy to all sorts of sensitive information. What happens when it falls into the hands of the wrong person? Cybercriminals may tamper with the information, retain a copy for future use, try to sell the data, and more. Not only is this detrimental to the municipality, but it could also cause citizens to lose trust in their local government’s ability to keep information safe and private.

Better safe than sorry: protect and prepare

It’s no question that ransomware attacks against local governments are a growing problem. In July, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, along with other organizations, released a statement providing advice on how state and local governments can better protect themselves against these attacks. Included is advice to backup systems daily, reinforce basic cybersecurity awareness and education and revisit response plans. Just like any security threat, cybersecurity should be taken seriously keeping careful preparedness and planning top of mind.

Additionally, municipalities should be working ransomware protection into their annual budgets. Investing heavily in IT personnel and infrastructure is the only way to adequately prevent and prepare against these devastating attacks.

Finally, partnering with a managed security service provider (MSSP) who can identify vulnerabilities, put preventative measures in place, perform regular system upgrades and patches, set up a backup and disaster recovery program, and actively monitor to detect any red flags will enhance system security, help to prevent against future attacks and prepare staff for emergency situations.

Don’t fall victim to ransomware and become yet another cybersecurity statistic. Partner with an MSSP that can help you stay ahead of attackers. Contact Warwick to discuss your options.