A variant of the ransomware known as SamSam shut down the computer systems of the city of farmington.
The virus had the capability of encrypting files on a computer network or locks down the entire system.
People received a message of files being hijacked when they attempt to log on and would have to pay 3 bitcoin i.e. more than $35,000 to get them back.
City Manager Rob Mayes stated the city was able to recover the encrypted information without paying ransom.
Further no customer or employee personal information was extracted and the public administration system was not affected.
The ransomware also did not breach any electric utility operations systems and there was not an interruption of public safety services.
The city email systems were not affected by the virus.
While some services including electronic bill pay and records processing were shut down, nearly all of the business systems that are related to customer service operations was restored.
TPRM report: https://www.rankiteo.com/company/city-of-farmington
"id": "cit154214522",
"linkid": "city-of-farmington",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Public Administration',
'location': 'Farmington',
'name': 'City of Farmington',
'type': 'Government'}],
'attack_vector': 'Encryption of files/lockdown of systems',
'description': 'A variant of the SamSam ransomware shut down the computer '
'systems of the city of Farmington, encrypting files on the '
'network and demanding a ransom of 3 bitcoin (over $35,000) to '
'restore access.',
'impact': {'systems_affected': ['computer systems',
'electronic bill pay',
'records processing']},
'motivation': 'Financial',
'ransomware': {'data_encryption': 'Yes',
'ransom_demanded': '3 bitcoin (over $35,000)',
'ransom_paid': 'No',
'ransomware_strain': 'SamSam'},
'response': {'remediation_measures': ['Recovered encrypted information '
'without paying ransom']},
'title': 'SamSam Ransomware Attack on City of Farmington',
'type': 'Ransomware'}