Ransomware encrypting files with $51,000 demand (via Bitcoin)
Cause
SamSam Ransomware
Outcome
Multiple municipal services down, including databases and wi-fi Years' worth of data destroyed City spends $2.7 million in recovering services
The city of Atlanta, Georgia was the subject of a ransomware attack which began in March 2018.[2] The city recognized the attack on Thursday, March 22, 2018,[1][3] and publicly acknowledged it was a ransomware attack.
Due to Atlanta's national importance as a transportation and economic hub, the attack received wide attention[4] and was notable for both the extent and duration of the service outages caused. Many city services and programs were affected by the attack, including utility, parking, and court services.[5] City officials were forced to complete paper forms by hand.[6]
On November 26, a grand jury indicted two Iranian hackers, Faramarz Shahi Savandi and Mohammad Mehdi Shah Mansouri, for the attack. The Department of Justice alleged that Savandi and Mansouri are part of the SamSam group; that the SamSam group is based out of Iran; and that the pair created SamSam Ransomware, the malware used in the attack. There are no affiliations with the government of Iran.[7]
^ ab"Atlanta, GA : Ransomware Cyberattack Information". www.atlantaga.gov. Archived from the original on July 18, 2018. Retrieved March 28, 2018.
^Brumback, Kate (March 23, 2018). "Atlanta city computer network remains hobbled by cyberattack". AP News. Retrieved August 8, 2023.
^Deere, Stephen (March 23, 2018). "Atlanta officials warn cyber attack may compromise sensitive data". The Atlanta Journal-Constitution. ISSN 1539-7459. Retrieved August 8, 2023.
^Blinder, Alan; Perlroth, Nicole (March 27, 2018). "A Cyberattack Hobbles Atlanta, and Security Experts Shudder". The New York Times. Archived from the original on January 11, 2022.
^Kearney, Laila (March 23, 2018). Maler, Sandra (ed.). "Atlanta ransomware attack throws city services into disarray". Reuters.
^Hutcherson, Kimberly (March 27, 2018). "Six days after a ransomware cyberattack, Atlanta officials are filling out forms by hand". CNN.
^Perlroth, Nicole; Benner, Katie (November 28, 2018). "Iranians Accused in Cyberattacks, Including One That Hobbled Atlanta". The New York Times. Archived from the original on January 14, 2022. Retrieved November 30, 2018.
and 24 Related for: Atlanta government ransomware attack information
The city of Atlanta, Georgia was the subject of a ransomwareattack which began in March 2018. The city recognized the attack on Thursday, March 22, 2018...
after Atlanta was attacked the previous year. Baltimore had been targeted by ransomware once prior to the May 2019 attack in 2018, though that attack was...
gasoline and jet fuel mainly to the Southeastern United States, suffered a ransomware cyberattack that impacted computerized equipment managing the pipeline...
WannaCry ransomwareattack on 12 May 2017 affected hundreds of thousands of computers in more than 150 countries. 2017 Petya cyberattack These attacks relate...
documented ransomware known as the AIDS trojan, the use of ransomware scams has grown internationally. There were 181.5 million ransomwareattacks in the...
Ian Duncan, Colin (7 May 2019). "Baltimore city government computer network hit by ransomwareattack". baltimoresun.com. Retrieved June 20, 2019.{{cite...
all ransomware incidents globally. In the United States between January 2020 and May 2023, Lockbit was used in approximately 1,700 ransomwareattacks, with...
were unable to access patient records for about three weeks due to a ransomwareattack on Greenway's systems. The company announced that the problem had...
Ian Duncan, Colin (7 May 2019). "Baltimore city government computer network hit by ransomwareattack". baltimoresun.com. Retrieved June 20, 2019.{{cite...
February 2020. Romo, Vanessa (30 March 2018). "As Atlanta Seeks To Restore Services, RansomwareAttacks Are On The Rise". NPR. Retrieved 10 October 2018...
ongoing ransomwareattack". TechCrunch. Retrieved October 2, 2022. Page, Carly (September 9, 2022). "Everything we know so far about the ransomwareattack on...
gov. SEC. Retrieved May 6, 2016. "Decrypting the Misconceptions Around Ransomware". July 19, 2021. "Magda Chelly - Head of Cyber Risk Advisory, Marsh Asia...
pipeline began in 1962. In May 2021, the pipeline was the subject of a ransomware cyberattack that caused a shutdown of their operations for five days,...
customers' credit cards had been exfiltrated. They further infected Qiwi with ransomwares and threatened to release more customer records. Anonymous proceeded...
Ratings: Game of Thrones Wins Night, NBA Playoffs, Real Housewives of Atlanta, Mad Men, Devious Maids & More". TV by the Numbers. Archived from the original...
to the Election and Finds the U.S. Doing the Same: Fearing Russian ransomwareattacks on the election, the company and U.S. Cyber Command mounted similar...
"Colonial Pipeline begins restarting pipeline operations following ransomwareattack". CBS News. Retrieved May 13, 2021. "CDC Director Statement on Pfizer's...
community systems by deploying denial of service attacks. Minneapolis also experienced an increase of ransomware, cryptomining, and malware infections to its...
according to Ukrainian magazine "InternetUA", he performed denial-of-service attacks against several Russian websites such as those belonging to Information...
"Frustrated Dish customers still spending hours on hold weeks after ransomwareattack, they say". NBC News. NBCUniversal News Group. Retrieved March 30...
Smith (none) 17 May 2017 (2017-05-17) 592,000 Topics: Global WannaCry ransomwareattack; US media reported that Trump had put national security at risk when...
Global Information