{"id":29588,"date":"2022-09-20T10:24:22","date_gmt":"2022-09-20T10:24:22","guid":{"rendered":"http:\/\/egrowonline.com\/?p=29588"},"modified":"2022-09-20T10:24:22","modified_gmt":"2022-09-20T10:24:22","slug":"ripple-effects-of-ransomware-attack-against-suffolk-county-continue-more-than-a-week-later","status":"publish","type":"post","link":"http:\/\/egrowonline.com\/?p=29588","title":{"rendered":"Ripple effects of ransomware attack against Suffolk County continue more than a week later"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div id=\"\">\n<div class=\"wp-block-image\">\n<figure class=\"single-featured-image\">\n\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" class=\"attachment-large size-large wp-post-image jetpack-lazy-image\" alt=\"\" srcset=\"https:\/\/i1.wp.com\/suffolktimes.timesreview.com\/files\/SCPD_commissioner_harrison.jpg?w=1500&amp;ssl=1 1500w, https:\/\/i1.wp.com\/suffolktimes.timesreview.com\/files\/SCPD_commissioner_harrison.jpg?resize=300%2C200&amp;ssl=1 300w, https:\/\/i1.wp.com\/suffolktimes.timesreview.com\/files\/SCPD_commissioner_harrison.jpg?resize=1024%2C683&amp;ssl=1 1024w, https:\/\/i1.wp.com\/suffolktimes.timesreview.com\/files\/SCPD_commissioner_harrison.jpg?resize=768%2C512&amp;ssl=1 768w, https:\/\/i1.wp.com\/suffolktimes.timesreview.com\/files\/SCPD_commissioner_harrison.jpg?w=1280 1280w\" data-lazy-sizes=\"(max-width: 640px) 100vw, 640px\" src=\"https:\/\/i1.wp.com\/suffolktimes.timesreview.com\/files\/SCPD_commissioner_harrison.jpg?fit=640%2C427&amp;ssl=1&amp;is-pending-load=1\" \/><figcaption>\n\t\t\t\t\t\t\t\t\t\t\t\tSuffolk County Police Commissioner Rodney Harrison discusses the department\u2019s response to the cyberattack outside the Yaphank headquarters Monday. (Credit: Joe Werkmeister)\t\t\t\t\t\t\t\t\t\t\t<\/figcaption><\/figure>\n<\/p><\/div>\n<p>On the morning of Sept. 8, the members of the Suffolk County Legislature were given a directive: Shut down your computers.<\/p>\n<p>Al Krupski (D-Cutchogue), who represents Riverhead and the North Fork, said the day prior he had a Zoom meeting that had to be canceled, the first indication that something was amiss. Soon after, the reality of a large-scale ransomware attack that has plagued the county began to come into focus. More than 10 days later, county email accounts and web sites remain down as investigators work to identify the source of the attack and safely restore the system.<\/p>\n<p>\u201cThis is a bigger, longer disruption than anyone could have imagined,\u201d Mr. Krupski said in an interview Monday.<\/p>\n<p>In a press conference last week, Suffolk County Executive Steve Bellone said the initial investigation did not directly point to a ransomware attack \u2014\u00a0in which hackers threaten to disable a system or publish stolen data unless paid a sum of money \u2014 although the malware detected had \u201challmarks of ransomware.\u201d<\/p>\n<p>Three days later, however, the source of the attack was allegedly disclosed when a ransomware team called ALPHV or \u201cBlackCat\u201d claimed responsibility for the attack on the its dark web site, according to <a target=\"_blank\" href=\"https:\/\/www.databreaches.net\/ny-suffolk-county-struggles-to-recover-from-blackcat-ransomware-attack\/\" rel=\"noreferrer noopener\">databreaches.net<\/a>, a blog that has been published since 2009 on data breaches.<\/p>\n<p>Databreaches published a copy of a post the hackers wrote, where they claimed to have extracted more than 4 terabytes of data.<\/p>\n<p>\u201cDue to the fact that Suffolk County Government and the aforementioned companies are not communicating with us, we are publishing sample documents extracted from the government and contractor network,\u201d the post read.<\/p>\n<p>It included samples of extracted files from Suffolk County court records, Sheriff\u2019s Office and contracts with the State of New York and \u201cother personal data of Suffolk County citizens.\u201d It said the hackers have obtained \u201chuge databases of Suffolk County citizens from the clerk.county.suf domain.\u201d<\/p>\n<p>Officials have not disclosed whether a specific monetary request has been made.<\/p>\n<p>At a press conference Monday outside the Suffolk County Police headquarters in Yaphank, police Commissioner Rodney Harrison provided little insight into the current state of the investigation when asked about the types of documents the attackers obtained and how residents could be affected.<\/p>\n<p>\u201cI wish I could share that with you,\u201d he said, citing an active investigation. \u201cA lot of things are still ongoing. As we get closer to identifying things, we will share with the media and public.\u201d<\/p>\n<p>Mr. Harrison and Mathew Lewis, the police chief of operations, spoke about how the department has shifted its emergency call system to an old way of operating. Call details have been recorded by hand with information handed by \u201crunners\u201d to a dispatcher, rather than going directly into a computer system.<\/p>\n<p>Mr. Harrison said the NYPD has provided the county call center five additional emergency call operators per tour, \u201chelping to reduce some of the stress on our current call takers.\u201d<\/p>\n<p>The NYS Department of Homeland Security and Emergency Services has also provided the department \u201chighly sophisticated technology that will provide additional firewall protection, enabling us to bring our [computer-aided dispatch] system back online safely and securely while the county\u2019s overall system continues to be addressed,\u201d Mr. Harrison said.<\/p>\n<p>He added that the system with \u201crunners\u201d relaying information has not slowed down responses for officers in the field. Radio systems among officers are not affected, he said.<\/p>\n<p>Police expect the CAD system to be up and running by the end of the week.<\/p>\n<p>Mr. Lewis highlighted a case early Monday morning where an NYPD officer took a call of an active maternity in Coram. The call ended up in the hands of the Suffolk County Fire Rescue and Emergency Services, where a dispatcher guided the father through the delivery. The baby was born before first responders could arrive and \u201cbaby and mom are doing fine,\u201d he said.<\/p>\n<p>Suffolk police have also partnered with the New York State Police, who are assisting with fingerprinting and other processes after an arrest at one of several barracks in the county, including Riverside.<\/p>\n<p>The cyber attack so far has had limited ramifications locally on the town governments in Riverhead and Southold. Both town supervisors said their IT systems have been operating normally.<\/p>\n<p>Southold Supervisor Scott Russell said Mr. Krupski has remained in contact with the town office.<\/p>\n<p>\u201cThe communication has been fine,\u201d he said in an email. \u201cWe just do it the old fashion way and use a phone.\u201d<\/p>\n<p>\u201cThere may have been a short delay in their ability to process pending applications but, there is nothing that couldn\u2019t wait while they sort through and fix their technical issues,\u201d he added.<\/p>\n<p>Riverhead Supervisor Yvette Aguiar said the town\u2019s system is independent has not been affected and the town has taken steps to \u201cstrengthen our IT protocols.\u201d<\/p>\n<p>Mr. Bellone announced last week the county had set up a temporary landing page to provide county residents with information at <a target=\"_blank\" href=\"http:\/\/suffolkcountyny.gov\" rel=\"noreferrer noopener\">suffolkcountyny.gov<\/a>. The town\u2019s 311 phone service remains intact and residents are encouraged to call for any questions related to any of the county services.<\/p>\n<p>Mr. Krupski said his office has fielded an uptick in calls in the past week with people seeking information typically available online.<\/p>\n<p>\u201cPeople have become reliant on the technology,\u201d he said. \u201cIf it\u2019s not there, then what do you do?\u201d<\/p>\n<p>Some departments are more reliant on the technology than others, he said.<\/p>\n<p>\u201cI think departments have been very good at trying to keep the wheels turning,\u201d he said.<\/p>\n<p>Last Thursday, the county IT workers came to the legislator\u2019s office to go through four desktop computers and a laptop to examine if anything had malware. He said the computers appeared to be clean and then members of the IT returned Monday morning while he was at a meeting.<\/p>\n<p>Mr. Krupski said he was unsure what kind of information was stolen and noted a lot of the information the county stores is public information available via the Freedom of Information Law.<\/p>\n<p>\u201cWe\u2019re not quite sure of the extent of this yet,\u201d he said. \u201cWe really don\u2019t know.\u201d<\/p>\n<p>Mr. Bellone emphasized last week that the county remains up and running and tried to reassure residents that they can expect the same level of service.<\/p>\n<p>\u201cWe\u2019re doing everything we can, even in this challenging circumstances, to keep it as business as usual for residents,\u201d the county executive said.<\/p>\n<p>Mr. Bellone said the county implemented \u201caggressive containment measures\u201d when the attack was detected to eradicate the intrusion and restore systems \u201cin a safe and secure manner.\u201d<\/p>\n<p>Ransomware attacks have often targeted school districts in recent years. The Riverhead Central School District in late 2021 and the Mattituck-Cutchogue School District earlier this year both endured cyber attacks.<\/p>\n<\/p><\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/suffolktimes.timesreview.com\/2022\/09\/ripple-effects-of-ransomware-attack-against-suffolk-county-continue-more-than-a-week-later\/\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Suffolk County Police Commissioner Rodney Harrison discusses the department\u2019s response to the cyberattack outside the Yaphank headquarters Monday. (Credit: Joe Werkmeister) On the morning of Sept. 8, the members of the Suffolk County Legislature were given a directive: Shut down your computers. Al Krupski (D-Cutchogue), who represents Riverhead and the North Fork, said the day [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":29589,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[45],"tags":[628,370,2588,570,9636,265,11307,339],"class_list":["post-29588","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ripple","tag-attack","tag-continue","tag-county","tag-effects","tag-ransomware","tag-ripple","tag-suffolk","tag-week"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"http:\/\/egrowonline.com\/wp-content\/uploads\/2022\/09\/SCPD_commissioner_harrison.jpg","_links":{"self":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/29588","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=29588"}],"version-history":[{"count":1,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/29588\/revisions"}],"predecessor-version":[{"id":29590,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/29588\/revisions\/29590"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/media\/29589"}],"wp:attachment":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29588"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29588"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29588"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}