Atlanta Ransomware Attack Update: Secureworks CEO Joins Investigation

by Dan Kobialka • Mar 27, 2018

Atlanta officials today advised city employees to turn on their computers and printers for the first time since last week’s ransomware attack, according to a prepared statement. Some computers will operate as usual, and city employees will return to normal use. Others may be affected by the ransomware attack and require city employees to use manual or alternative processes.

In addition, Atlanta officials announced the following systems are now available to city employees:

• Accela government software.
• Email.
• Oracle cloud applications and services.
• Siebel customer relationship management (CRM) software.
• Select services in enQuesta, a solution for municipal utilities.

Atlanta officials are conducting an assessment as part of the city’s ransomware attack restoration and recovery processes. City officials also will continue to provide ransomware attack restoration and recovery updates.

Atlanta Mayor Responds to Ransomware Attack

Atlanta officials have not found any evidence that indicates sensitive employee or public data had been compromised due to the ransomware attack, Mayor Keisha Lance Bottoms told The Atlanta Journal Constitution. However, Bottoms urged Atlanta employees and residents to monitor their accounts and credit activity.

Bottoms also has not ruled out paying a $51,000 ransom to unlock the city’s computer system, the Atlanta Journal Constitution reported. She described the ransomware attack as a “hostage situation” and indicated the city is moving into the incident’s recovery phase.

How Are Atlanta Officials Addressing the Ransomware Attack?

Atlanta officials have hired Mike Cote, CEO of MSSP Secureworks, to investigate the ransomware attack, according to Fox 5 Atlanta. Cote indicated he believes he knows who is responsible for the Atlanta ransomware attack but declined to provide additional details.

Also, Atlanta officials have created a cyberattack response team, Fox 5 Atlanta reported.

Atlanta Ransomware Attack: Here’s What You Need to Know

Cybercriminals launched a ransomware attack against the City of Atlanta on Thursday. They rendered various city systems inaccessible and demanded a ransom of $51,000 in bitcoin to decrypt the systems.

Atlanta’s airport, public safety offices, water services and the police and fire departments were not affected by the ransomware attack. Meanwhile, the FBI, U.S. Department of Homeland Security (DHS) and U.S. Secret Service are investigating the incident.