Some of Columbia’s online city services remained unavailable after an Oct. 20 ransomware attack, officials said on Oct. 26. File/StaffCOLUMBIA — Some Columbia city programs remain disrupted almost a week after the city was targeted in what officials confirmed was a ransomware attack that “impacted several public-facing services and involved sensitive data within the City’s network,” the city said in a press release.City officials confirmed the services impacted by the incident were still affected as of Oct. 26, but “City departments have developed alternate procedures to ensure that almost all City services are available for the public,” city spokesperson Justin Stevens said in an Oct. 26 statement.What happenedThe City of Columbia experienced a “cybersecurity incident” on Oct. 20 that was first reported on Oct. 21. The South Carolina Law Enforcement Division was brought in to investigate “suspicious activity” flagged by the city’s Information Technology Department that the city later confirmed was a ransomware attack in an Oct. 23 press release.Ransomware is defined as a type of malicious software preventing users from accessing computer files, systems or networks and demands a ransom for their return, according to the FBI. The FBI reported thousands of ransomware complaints nationwide in 2025.”The City is taking this incident extremely seriously and is working methodically with SLED and cybersecurity specialists to contain the attack, identify affected systems, assess the extent of any information that may have been accessed or compromised, and restore impacted services,” City Manager Teresa Wilson said in an Oct. 23 video statement coinciding with the press release.Some city applications and services were taken down “as a precautionary measure to help contain the incident and support the investigation and recovery process,” Wilson said.Several non-emergency, online city services were impacted as of Oct. 21, including:Each of those services, except for Business Licensing and Planning & Development Services, were still listed as being impacted in the city’s Oct. 23 press release.Key emergency services remained online.The latest updatesSome of the services listed appeared operational on Oct. 26, while others — including the city’s GIS system — displayed a message saying the application was “temporarily unavailable.”The Columbia Police Department, Columbia-Richland Fire Department, 911 communications, Columbia Water systems and the Payment Center remain operational, Stevens said.”The City of Columbia wants to reassure residents that critical public safety and utility systems remain operational,” he said.The city confirmed the criminal investigation into the incident is ongoing.”We will continue to update the public when more information is available,” Stevens said.A SLED spokesperson said the agency “did not have an update” as of Oct. 26, but said additional information “may be available at a later time.”SLED may collaborate with the FBI and other state and federal partners “to investigate the incident and determine its origin, scope and severity,” according to the city’s Oct. 23 press release.”In addition, the City of Columbia is weighing its options and has reached out to highly qualified third-party cybersecurity professionals to advise the City on our action plan to address the current threat,” Wilson said in the video statement.Officials have not released what sensitive information the perpetrators of the ransomware attack targeted or obtained, or whether they have confirmed that information.”The City of Columbia understands the importance of protecting the information entrusted to it and recognizes that residents, businesses and employees may have questions or concerns about this incident,” Wilson said. “As the investigation continues and additional information is confirmed, the City will provide further updates regarding the incident, service restoration efforts, protective measures and any identified impacts to information. The City remains committed to a thorough, transparent and measured response throughout the investigation and recovery process.”What to do insteadWhile MyColaSC is impacted, the city said residents can call 803-545-3300 to report concerns or request assistance with issues typically submitted through the application, including potholes, fallen trees, broken streetlights and other local service requests.For all emergencies, residents should continue to call 911, the city said.
Click Here For The Original Source.
——————————————————–
