City of Mountain Home

The ransomware attack on the server encrypted and renamed 90,000 files in roughly a minute and a half.

An email address that could be used to contact the hacker and discuss a ransom to unlock the data was discovered after online research on the extension appended to every impacted file.

No data was misplaced or stolen because the server was rebuilt from a backup.

Source: https://www.rgj.com/story/news/local/2017/03/14/city-erases-re-installs-server-after-ransomware-attack/99128740/

TPRM report: https://scoringcyber.rankiteo.com/company/city-of-mountain-home-id

"id": "cit0112722",
"linkid": "city-of-mountain-home-id",
"type": "Ransomware",
"date": "03/2017",
"severity": "75",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'data_breach': {'data_encryption': ['90,000 files encrypted']},
 'description': 'The ransomware attack on the server encrypted and renamed '
                '90,000 files in roughly a minute and a half. An email address '
                'that could be used to contact the hacker and discuss a ransom '
                'to unlock the data was discovered after online research on '
                'the extension appended to every impacted file. No data was '
                'misplaced or stolen because the server was rebuilt from a '
                'backup.',
 'impact': {'systems_affected': ['Server']},
 'ransomware': {'data_encryption': ['90,000 files encrypted']},
 'response': {'remediation_measures': ['Server rebuilt from a backup']},
 'title': 'Ransomware Attack on Server',
 'type': 'Ransomware'}