City of Sheboygan

The city of Sheboygan experienced a ransomware attack in late October, leading to unauthorized network access by an external party. The attack disrupted city operations, prompting officials to isolate the computer network and collaborate with cybersecurity experts to restore functionality. A ransom demand was received, and the incident was reported to law enforcement, with the city adhering to their guidance. While the investigation remains ongoing, officials stated that no sensitive personal information is believed to have been compromised at this stage. However, the attack caused operational disruptions, including potential delays in city services. Residents were assured that notifications would be issued if any sensitive data were found to be affected. The city emphasized its commitment to transparency, trust, and security while managing the incident, though phone lines remained available for assistance.

Source: https://www.wpr.org/news/sheboygan-hit-apparent-ransomware-attack

TPRM report: https://www.rankiteo.com/company/city-of-sheboygan

"id": "cit456090325",
"linkid": "city-of-sheboygan",
"type": "Ransomware",
"date": "11/2024",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'customers_affected': 'Residents (potential impact on '
                                              'city service access)',
                        'industry': 'Public Administration',
                        'location': 'Sheboygan, Wisconsin, USA',
                        'name': 'City of Sheboygan',
                        'type': 'Government (Municipality)'}],
 'customer_advisories': 'Residents advised to use city phone lines for '
                        'assistance accessing services.',
 'data_breach': {'data_encryption': True,
                 'personally_identifiable_information': 'None believed '
                                                        'compromised (as per '
                                                        'city statement)'},
 'date_detected': 'Late in the week of October 28, 2023',
 'date_publicly_disclosed': 'November 5, 2023 (Sunday statement)',
 'description': 'The city of Sheboygan secured its computer network after '
                'discovering unauthorized access by an external party, later '
                'identified as a ransomware attack. The city isolated its '
                'network and is working with cybersecurity experts and law '
                'enforcement to restore functionality. A ransom was demanded, '
                'but officials stated no sensitive personal information is '
                'believed to have been compromised. The investigation remains '
                'ongoing.',
 'impact': {'brand_reputation_impact': 'Potential concern among residents and '
                                       'partners (acknowledged by city)',
            'data_compromised': 'None believed (as per city statement)',
            'identity_theft_risk': 'None reported (as per city statement)',
            'operational_impact': 'City services disrupted; phone lines remain '
                                  'available for assistance',
            'systems_affected': ['City computer network']},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial (ransom demand)',
 'ransomware': {'data_encryption': True, 'ransom_demanded': True},
 'references': [{'source': 'Wisconsin Public Radio (WPR)'}],
 'response': {'communication_strategy': ['Public statements (Nov 5), resident '
                                         'advisories via phone lines'],
              'containment_measures': ['Network isolation'],
              'incident_response_plan_activated': True,
              'law_enforcement_notified': True,
              'recovery_measures': ['Restoring network functionality with '
                                    'cybersecurity experts'],
              'third_party_assistance': True},
 'stakeholder_advisories': 'City issued statements thanking employees, '
                           'residents, and partners for patience; phone lines '
                           'available for assistance.',
 'title': 'Ransomware Attack on the City of Sheboygan',
 'type': 'Ransomware Attack'}