{"id":58887,"date":"2018-03-22T16:04:49","date_gmt":"2018-03-22T21:04:49","guid":{"rendered":"https:\/\/www.pcmatic.com\/blog\/?p=58887"},"modified":"2018-04-02T10:28:23","modified_gmt":"2018-04-02T15:28:23","slug":"atlantas-city-systems-riddled-ransomware","status":"publish","type":"post","link":"https:\/\/www.pcmatic.com\/blog\/atlantas-city-systems-riddled-ransomware\/","title":{"rendered":"Atlanta’s City Systems Suffer Outages After Ransomware Infection"},"content":{"rendered":"

Update, 4\/2\/2018: <\/em>The City of Atlanta continues to struggle getting their systems back online.\u00a0 Since turning on computers last week, they have found a plethora of data that has been left inaccessible.\u00a0 The city has not paid the $51,000 ransom demand, and remains uncertain if they will be able to recover the remaining data that has been left encrypted.<\/p>\n

Update, 3\/29\/2018:\u00a0<\/em>The City of Atlanta has released a new information hub webpage<\/a>, which is available to the public.\u00a0 The purpose is to provide one place for everyone to ask questions, see the press releases, and get the latest information on the ransomware attack that has crippled the city’s systems.\u00a0 At this time, city offices are still “working around the clock” to get the ransomware removed and the files recovered.\u00a0 At this time, there has been no evidence of misuse of personal information.\u00a0 Although, the city is encouraging residents to act proactively and keep an eye on their personal accounts for any changes.\u00a0 Also, it remains unclear when the systems infected with ransomware will be restored.\u00a0 City officials have stated,<\/p>\n

“It would be inappropriate to speculate on when this matter will be fixed, but we are committed to resolution. “<\/p><\/blockquote>\n

Update, 3\/27\/018:\u00a0<\/em>For the first time since March 22, 2018, the City of Atlanta is turning on their computers, servers and printers to gauge the impact of the SamSam ransomware infection.\u00a0 The city’s offices have remained open during the remediation process; however, multiple services have been impaired.\u00a0 As of today, city employees have access to their email accounts, as well as other programs needed for job duties.\u00a0 Although the programs are available, the only employees who are able to access them are those who have uninfected computers.\u00a0 It remains unclear how long the remediation process will take, or if the city will end up paying the $51,000 ransom demand.<\/p>\n

City of Atlanta Struggling Post-Ransomware Infection<\/h3>\n

Officials have confirmed<\/a>, the City of Atlanta’s systems are suffering from outages after ransomware infected their networks.\u00a0 It is believed the City of Atlanta’s systems were infected with the same ransomware variant, SamSam, that took down Colorado’s Department of Transportation<\/a> earlier this month.\u00a0 At this time, multiple areas of the network, both internal and consumer-facing are offline.\u00a0 Some of which, interfere with an individual’s ability to pay for services online, as well as access the city’s transportation system, MARTA.\u00a0 However, Atlanta’s international airport, city website\u00a0atlantaga.gov<\/a>, and emergency systems appear to be running as usual.<\/p>\n

The current ransom demands are at $51,000.\u00a0 City officials have reported the IT team is working with Microsoft to resolve the issue.\u00a0 It remains unclear how long systems will be offline, or if the city will end up paying the ransom demand.<\/p>\n

Other Ransomware Attacks<\/h4>\n

For a list of ransomware attacks that have already taken place in 2018, you may click here<\/a>. We have also created a map, see below, of the ransomware attacks that have taken place in the U.S.
\n