Minot city manager addresses ransomware attack on water treatment plant | #ransomware | #cybercrime


MINOT, N.D. (KMOT) – Earlier this week, we told you about a ransomware attack on Minot’s water treatment plant.

While it didn’t harm our water supply, questions are being raised about what went down.

On March 14, Minot’s Water Treatment Plant discovered a ransomware attack on one of its computer servers.

It targeted the SCADA system—that’s the software used to monitor plant operations.

In response, Minot City Manager Tom Joyce said staff unplugged the server entirely.

“You can pull it, like they did, and we went to manual operations,” said Joyce.

They did that for 16 hours until technicians were able to start up a backup server.

“Getting out and walking the system and making sure that’s all working. Getting out to our city water towers, ensuring that we’re maintaining pressurization,” said Joyce.

Joyce said the water supply was never in danger and addressed why he chose not to notify the public at the time of the attack.

“The water remained potable. It was safe. Never an issue with the safety of the water to all of our users. No problem with the pressurization, and that’s why nobody knew it even happened,” said Joyce.

In the hacker’s letter, there was no direct ask for money, and nothing happened beyond the letter on a screen.

Joyce said he chose not to read it, but heard it was something along the lines of this:

“The bad actor communicated: ‘In other communities they’ve paid up to $1 million to stop this from occurring,’” said Joyce.

The city’s response was simple.

“You know what we paid? Maybe a few hours of overtime because we pulled the plug. We did the right thing,” said Joyce.

He praises the team behind the response: IT professionals alongside staff from the Water Treatment Plant, utilities and sanitation departments.

“I have trust in our subject matter experts. We have great people on this team, and they barely want any accolades for it,” said Joyce.

Now, the city is reviewing all of its cybersecurity measures and setting up additional training to prevent future attacks.

Joyce said they do not know who may be behind this incident at this time.

He added the FBI has been informed.



Click Here For The Original Source.

——————————————————–

..........

.

.

National Cyber Security

FREE
VIEW