Florida city pays $600,000 ransom to save computer records

[Eugene]

Source: Associated Press

Florida city pays $600,000 ransom to save computer records

By TERRY SPENCER
June 19, 2019

FORT LAUDERDALE, Fla. (AP) — A Florida city agreed to pay $600,000 in ransom to hackers who took over its computer system, the latest in thousands of attacks worldwide aimed at extorting money from governments and businesses.

The Riviera Beach City Council voted unanimously this week to pay the hackers’ demands, believing the Palm Beach suburb had no choice if it wanted to retrieve its records, which the hackers encrypted. The council already voted to spend almost $1 million on new computers and hardware after hackers captured the city’s system three weeks ago.

The hackers apparently got into the city’s system when an employee clicked on an email link that allowed them to upload malware. Along with the encrypted records, the city had numerous problems including a disabled email system, employees and vendors being paid by check rather than direct deposit and 911 dispatchers being unable to enter calls into the computer. The city says there was no delay in response time.

Spokeswoman Rose Anne Brown said Wednesday that the city of 35,000 residents has been working with outside security consultants, who recommended the ransom be paid. She conceded there are no guarantees that once the hackers received the money they will release the records. The payment is being covered by insurance. The FBI on its website says it “doesn’t support” paying off hackers, but Riviera Beach isn’t alone: many government agencies and businesses do.

-snip-

Read more: https://apnews.com/0762caec21874fc09741abbdec0f78ab

[OhZone]

1. Can't these governments -

just make twice daily backups and take the data offline?

Then they'd have data like 12 hours old at worst.

Oh well.

[htuttle]

2. It's so cheap and easy to archive data to the cloud nowadays

There's no excuse for ever deleting backups. Ever.

[Eugene]

3. IT people who believe in keeping good backups don't always have the power to set priorities.

Where I once worked, the boss wanted pinch pennies on replacing worn-out tapes even after a data loss disaster. At another site, managers convinced themselves that they didn't need a backup because that system wasn't mission critical — until the hard drive failed.

Redundancy can be a hard sell to key decision makers.

[Yo_Mama_Been_Loggin]

4. Regular data backups are essential

Sad how many don't do this.