City of Riverside

Ransomware has infected the servers of the Riverside Fire and Police department for the second time in a month.

The first ransomware infection took place on April 23 last month and encrypted ten months' worth of work data related to active investigations.

The Riverside Fire and Police department has not fully recovered from the first attack.

The second infection took place on May 4.

The second ransomware infection only locked up data for the last eight hours of work, and the department fully recovered after the second attack.

They lost about eight hours worth of information which they have to re-enter.

Source: https://www.bleepingcomputer.com/news/security/police-dept-loses-10-months-of-work-to-ransomware-gets-infected-a-second-time/

TPRM report: https://www.rankiteo.com/company/city-of-riverside

"id": "cit225030622",
"linkid": "city-of-riverside",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Public Safety',
                        'location': 'Riverside',
                        'name': 'Riverside Fire and Police Department',
                        'type': 'Government'}],
 'date_detected': ['2023-04-23', '2023-05-04'],
 'description': 'Ransomware has infected the servers of the Riverside Fire and '
                'Police department for the second time in a month. The first '
                "infection took place on April 23 and encrypted ten months' "
                'worth of work data related to active investigations. The '
                'department has not fully recovered from the first attack. The '
                'second infection took place on May 4 and only locked up data '
                'for the last eight hours of work. The department fully '
                'recovered after the second attack but lost about eight hours '
                'worth of information which they have to re-enter.',
 'impact': {'data_compromised': ["ten months' worth of work data",
                                 'eight hours worth of information'],
            'systems_affected': 'Servers'},
 'ransomware': {'data_encryption': True},
 'title': 'Ransomware Infection at Riverside Fire and Police Department',
 'type': 'Ransomware'}