
Baltimore Ransomware Attack Update: City to Buy $20M in Cyber Insurance
The Baltimore Board of Estimates approves the purchase of $20 million in cyber liability coverage after the city experienced a ransomware attack in May 2019.

Baltimore Ransomware Attack Update: City CIO Exits
Baltimore CIO Frank Johnson and the city part ways. Baltimore ransomware attack earlier this year damaged city’s technology infrastructure.

Baltimore Ransomware Attack Recovery Update
The City of Baltimore will transfer $6 million from a fund for parks and public facilities to help cover costs associated with a May ransomware attack.

Baltimore Ransomware Attack Involved NSA’s EternalBlue Hacker Tools: Report
The Baltimore ransomware attack involved EternalBlue malware stolen from the National Security Agency (NSA) in 2017, The New York Times asserts.

Baltimore Ransomware Attack Update: RobbinHood Malware’s Lasting Impact
Baltimore’s recovery from a RobbinHood ransomware attack is a painstaking process. Some city applications will need complete rebuilds, Baltimore officials concede.

Baltimore Ransomware Attack: RobbinHood Malware Recovery Continues
Baltimore ransomware recovery & investigation continues, Baltimore Mayor Bernard (“Jack”) Young says. FBI investigates multiple RobbinHood malware attacks.

Baltimore Ransomware Attack: RobbinHood Encrypts City Servers
RobbinHood ransomware attack infects Baltimore, Maryland, city servers. Hackers demand $76,000. City declines to pay ransomware amid disaster recovery efforts.

Baltimore Schools Ransomware Attack Recovery Status Update
Ransomware attacks Baltimore County Public Schools (BCPS). Schools closed amid malware recovery effort. Unclear if MSSPs & third-party forensics investigators are assisting.

Huntsville, Alabama, School District Ransomware Attack: Recovery Update
Huntsville, Alabama, schools reopen after November 30 ransomware attack, but students aren’t permitted to use some academic computer systems.

RobbinHood Ransomware Update: Sophos Identifies New Attacks
Sophos investigates RobbinHood ransomware attacks in which cybercriminals use a digitally signed hardware driver to delete security products from computers.