lockbit2 attacks Saint Cloud

Incident Date:

January 27, 2022

World map

Overview

Title

lockbit2 attacks Saint Cloud

Victim

Saint Cloud

Attacker

Lockbit2

Location

Saint Cloud, France

Saint Cloud, France

First Reported

January 27, 2022

St. Cloud Ransomware Attack: A Cybersecurity Threat in the Transportation Sector

Company Profile

St. Cloud is a city located about an hour south of Orlando, with a population of approximately 60,000 residents. The city's transportation sector is a significant part of its operations, but the extent of its size and impact on the industry is not explicitly stated in the search results.

Vulnerabilities and Impact

The ransomware attack affected several city departments, leading to the implementation of cash-only payments for certain services, such as Parks and Recreation events and services, and the Transfer Station. Online facility reservation payments and online event registrations are still accepting credit card payments. The city has confirmed that payments to external utility providers and the Tax Collector's Office are not affected by the cyberattack.

The city has implemented measures to continue serving its residents, including operating trash and recycling collection routes as scheduled. Emergency response services are still operating, with residents assured that they will get a 9-1-1 operator and there will be a response in case of an emergency.

The city has begun working with an incident response team to resume normal operations as quickly as possible, with law enforcement investigating the attack. The IT department is working to quarantine any sensitive information and refresh systems.

The ransomware attack on St. Cloud highlights the vulnerabilities of city governments and the transportation sector to cyber threats. The city has implemented measures to mitigate the impact of the attack and is working with an incident response team to restore normal operations. The investigation into the attack is ongoing, and no details about the ransom demand or the attacker's identity have been released.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.