City of Dallas

The City of Dallas targeted by the ransomware attack that compromised a number of servers in its system, including the Dallas Police Department's website.

The hackers, a collective known as Royal, assert that they encrypted the city's vital data and threatened to leak private information online.

The ransomware gang threatened to divulge information on police informants to the criminal groups they were providing information to.

Cyber specialists think that a phishing email that an employee unknowingly clicked is what started the attack.

Source: https://www.cbsnews.com/texas/news/possible-cyber-attack-hampering-dallas-police-operations/

TPRM report: https://scoringcyber.rankiteo.com/company/city-of-dallas

"id": "cit17229523",
"linkid": "city-of-dallas",
"type": "Ransomware",
"date": "05/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'Dallas, Texas',
                        'name': 'City of Dallas',
                        'type': 'Government'}],
 'attack_vector': 'Phishing Email',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Police Informants Information',
                                              'Vital City Data']},
 'description': 'The City of Dallas was targeted by a ransomware attack that '
                'compromised several servers, including the Dallas Police '
                "Department's website. The attackers, known as Royal, claimed "
                'to have encrypted vital data and threatened to leak private '
                'information online. The ransomware gang also threatened to '
                'divulge information on police informants. Cyber specialists '
                'believe the attack was initiated by a phishing email that an '
                'employee unknowingly clicked.',
 'impact': {'data_compromised': ['Police Informants Information',
                                 'Vital City Data'],
            'systems_affected': ["Dallas Police Department's Website",
                                 'City Servers']},
 'initial_access_broker': {'entry_point': 'Phishing Email',
                           'high_value_targets': ['Police Informants '
                                                  'Information']},
 'motivation': 'Financial Gain, Data Leakage',
 'post_incident_analysis': {'root_causes': 'Phishing Email'},
 'ransomware': {'ransomware_strain': 'Royal'},
 'threat_actor': 'Royal',
 'title': 'Ransomware Attack on the City of Dallas',
 'type': 'Ransomware Attack'}