Florida Municipality Suffers Cyber Extortion

In May this year the city of Riviera Beach in Florida (pop. 35,000) municipal computer systems went down because of a phishing email that an employee opened, releasing  hacking malware.  Since then the City Council have had no email use or payment options.

This successful attack follows the on suffered by the much larger US City of Atlanta in March 2018. Now the City’s Riviera Beach City Council has now confirmed that it will pay 65 Bitcoins, or around $600k, ransom to get the city’s computer system working and back online and they hope to be given back their encrypted records.

A special council met on Monday evening 17th June and voted to agree that the city’s insurance provider should pay the ransom. Florida’s Police are investigating the phishing and hack.Of course having paid the ransom there is no guarantee that they will get their systems and data returned. Spokeswoman Rose Anne Brown said on Wednesday 19th June that the city has been working with external security consultants and that they have recommended that the ransom be paid. 

Brown agreed that there are no guarantees that the hackers will release the records once the payment has been made.  
The council are also going to spend at least $1m on new computer systems, a new IT specialist and cyber-security.

This attack is the latest in a number of globally serious cyber-attacks and the government has already indicted two Iranian men for attacking the US with at least 200 hundred cyber-hacks against different cities across the US, including Baltimore who refused to pay the hacker ransom.

Now new work is under-way to develop more secure cyber security systems and to protect existing installations. 

News by CSI

You Might Also Read:

Security Flaws In Smart City Technology:

How To Deal With The Rising Tide Of Ransomware:

 

 

« Self-Driving Cars Are All About Surveillance
Turning Amsterdam Into A Smart City »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

ClearedJobs.Net

ClearedJobs.Net

ClearedJobs.Net is a career site and job fair company for professionals seeking careers in the defense, intelligence and cyber security communities.

Perkins Coie LLP

Perkins Coie LLP

Perkins Coie LLP is an internationalk law firm with offices across the USA and Asia. Practice areas include Privacy and Data Security.

Digital Detective

Digital Detective

Digital Detective offer a range of products and services for digital forensic analysis and advanced data recovery.

Vaddy

Vaddy

Vaddy provide an automatic web vulnerability scanner for DevOps that performs robust security checks to ensure that web app code is secure.

Paladion

Paladion

Paladion is a provider of managed IT security services.

OnSystem Logic

OnSystem Logic

OnSystem Logic has developed a unique, patent-pending solution to solve the problem of the exploitation of flaws in application software as a technique for cyber attacks.

Sistem Integra (SISB)

Sistem Integra (SISB)

SISB provide IT Security Infrastructure & Development, Mechanical & Electrical Services, Fire Safety & Detection Services, Facilities Management & Application Development.

Tempest

Tempest

TEMPEST is a leading provider of IT products and services including solutions for network and application security.

DFI

DFI

DFI is a global leading provider of high-performance computing technology across multiple embedded industries.

Trusted CI

Trusted CI

Trusted CI, the NSF Cybersecurity Center of Excellence is comprised of cybersecurity experts who have spent decades working with science and engineering communities.

Startup Capital Ventures

Startup Capital Ventures

Startup Capital Ventures is an early stage venture capital firm with a focus on FinTech, Cloud/SaaS, Security, Healthcare IT, and IoT.

Cybeta

Cybeta

Cybeta's actionable cybersecurity intelligence keeps your business safe with strategic and operational security recommendations that prevent breaches.

Kordia

Kordia

Kordia is a leading provider of mission-critical technology solutions throughout Australasia. We have the most comprehensive cyber security offering in New Zealand.

Cryptr

Cryptr

Cryptr provides plug and play authentication to manage all your authentication strategies in one place with just a few lines of code.

Security Awareness Special Interest Group (SASIG)

Security Awareness Special Interest Group (SASIG)

The Security Awareness Special Interest Group (SASIG) addresses the human aspects of security and fraud prevention in an initiative to improve trust and confidence in the online environment.

Hunt & Hackett

Hunt & Hackett

Hunt & Hackett helps European companies prevent, detect and respond to today’s most advanced adversaries, safeguarding them against cyberthreats and espionage.