{"id":55100,"date":"2016-11-07T14:42:47","date_gmt":"2016-11-07T14:42:47","guid":{"rendered":"https:\/\/www.pcmatic.com\/blog\/?p=55100"},"modified":"2016-12-08T15:41:01","modified_gmt":"2016-12-08T15:41:01","slug":"madison-county-ransomware-attack","status":"publish","type":"post","link":"https:\/\/www.pcmatic.com\/blog\/madison-county-ransomware-attack\/","title":{"rendered":"Madison County Computers Inaccessible After Ransomware Attack"},"content":{"rendered":"

Update<\/strong>: After five days of battling to get systems back up and running, Madison County has paid the ransom demands to regain access.\u00a0 Herald Bulletin<\/a> reported, the county was encouraged to pay the ransom amount by their insurance provider, who paid the $28,000 demand.\u00a0 The county was left paying the insurance deductible, along with $17,500 to bring in professional services to bring their servers back online.\u00a0\u00a0Lisa Cannon, Director of IT,\u00a0reported this\u00a0ransomware attack infected 600 personal computers and 75 servers.\u00a0 The county is continuing to evaluate best practice options for disaster recovery, as well as how to prevent future attacks.<\/em><\/p>\n

Update 12\/08\/2016<\/strong>: CSO Online<\/a>\u00a0is reporting that Madison County has now spent approximately $220,000 to recover from this ransomware attack. The county signed three contracts worth $198,180 to work with service providers to implement off-site data backups, a backup court system, and prevent future attacks. The IT department head is also not satisfied with the current budget her department has after it was cut by 56% saying, “We can\u2019t be expected to operate as large as General Motors on a gas station budget. We need help and it\u2019s going to take funds.” According to reports, during the infection county police officers were forced to use pen and paper when processing inmate information as computers were not functional.\u00a0<\/em><\/p>\n

Ransomware has struck another county office.\u00a0 The computers associated with the Madison County offices, located in Indiana, have been infected with ransomware.\u00a0 According to WTHR News<\/a>, the County’s systems have been completely shut down, making the information within the systems inaccessible.<\/p>\n

It has been reported that the County’s operations are continuing.\u00a0\u00a0However, with the systems down, they have reverted back to the manual process of doing everything with a pen and paper.\u00a0 It is not believed any personal information within the systems has been compromised.\u00a0 The County is also confident, all voter data has remained secure.<\/p>\n

The ransomware variant that infiltrated the systems is not being disclosed at this time.\u00a0 The County has not released the ransom demand, or if they plan to pay in order to get their systems back up and running as usual. As always, PC Matic<\/a> does not encourage any ransomware victims to pay the ransom amount.\u00a0 By doing so, it only reinforces the hackers to continue with these attacks.\u00a0 It is encouraged businesses and home users back up their data daily, to an external storage device.\u00a0 This will provide a copy of all user information, files, pictures, etc. in case a ransomware attack were to infect your PC.\u00a0 Also, if you have been hit with ransomware, it is clear your security solution has failed to keep you secure.\u00a0 PC Matic <\/a>encourages users to implement a security solution with application whitelisting technology<\/a>\u00a0to prevent future attacks.<\/p>\n

Ransomware Attacks of 2016<\/h3>\n

To see a full list of ransomware attacks that have taken place, you can click here<\/a>.\u00a0 We have also created a ransomware map, see below, of the ransomware attacks that have taken place in the U.S. this year.<\/p>\n